IBM Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Cloud Manager

Multiple vulnerabilitieshave been identified in OpenSSL (OpenSSL and Node.JS consumers) . OpenSSL is used by IBM Cloud Manager. IBM Cloud Manager has addressed the applicable CVEs.

CVE(s): CVE-2017-3730, CVE-2017-3731, CVE-2017-3732, CVE-2016-7055

Affected product(s) and affected version(s):

IBM Cloud Manager with OpenStack 4.3.0 through 4.3.0.8,
IBM Cloud Manager with OpenStack 4.1.0 through 4.1.0.5,

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2hx6PLX
X-Force Database: http://ift.tt/2kDB4yh
X-Force Database: http://ift.tt/2knsB3D
X-Force Database: http://ift.tt/2kDymIW
X-Force Database: http://ift.tt/2hjUUfe

The post IBM Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Cloud Manager appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2hz9Mbn