IBM Security Bulletin: Aspera OnDemand is affected by an openSSL vulnerability (CVE-2017-3736)

Aspera OnDemand has addressed the following openSSL vulnerability.

CVE(s): CVE-2017-3736

Affected product(s) and affected version(s):

Affected Products	Affected Versions
Aspera Faspex On Demand	3.7.4 and earlier
Aspera Shares on Demand	3.7.4 and earlier
Aspera Server on Demand	3.7.4 and earlier
Aspera Platform on Demand	3.7.4 and earlier

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10731517
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/134397

The post IBM Security Bulletin: Aspera OnDemand is affected by an openSSL vulnerability (CVE-2017-3736) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2paCUKg