IBM Security Bulletin: Vulnerabilities in OpenSSL affect IBM Rational ClearQuest (CVE-2017-3735, CVE-2017-3737, CVE-2017-3738)

OpenSSL vulnerabilities were disclosed on August 28, November 2, and December 7, 2017 by the OpenSSL Project. OpenSSL is used by IBM Rational ClearQuest. IBM Rational ClearQuest has addressed the applicable CVEs.

CVE(s): CVE-2017-3735, CVE-2017-3737, CVE-2017-3738

Affected product(s) and affected version(s):

Rational ClearQuest versions 8.0 through 8.0.0.21, 8.0.1 through 8.0.1.16, 9.0 through 9.0.0.6, and 9.0.1 through 9.0.1.2 in the following component:

• ClearQuest hooks and cqperl/ratlperl scripts that use SSL.
• Database drivers configured to use SSL connections to the database.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg22012393
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/131047
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/136077
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/136078

The post IBM Security Bulletin: Vulnerabilities in OpenSSL affect IBM Rational ClearQuest (CVE-2017-3735, CVE-2017-3737, CVE-2017-3738) appeared first on IBM PSIRT Blog.

Version	Status
9.0.1 through 9.0.1.2	Affected
9.0 through 9.0.0.6	Affected
8.0.1 through 8.0.1.16	Affected
8.0 through 8.0.0.21	Affected

from IBM Product Security Incident Response Team https://ift.tt/2Ia5Gpp