IBM Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Spectrum Control (formerly Tivoli Storage Productivity Center) (CVE-2018-0732, CVE-2018-0737)

Sep 11, 2018 9:00 am EDT

Categorized: Low Severity

Share this post:

OpenSSL vulnerabilities were disclosed by the OpenSSL Project on April 16, 2018 and June 12, 2018. OpenSSL, used by IBM Spectrum Control (formerly Tivoli Storage Productivity Center) , has addressed the applicable CVEs.

CVE(s): CVE-2018-0732, CVE-2018-0737

Affected product(s) and affected version(s):

Affected Product	Affected Versions
IBM Tivoli Storage Productivity Center	5.2.0 – 5.2.7.1
IBM Spectrum Control	5.2.8 – 5.2.17.0

The versions listed above apply to all licensed offerings of IBM Tivoli Storage Productivity Center and IBM Spectrum Control.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10730811
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144658
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141679

from IBM Product Security Incident Response Team https://ift.tt/2N5w1s0