IBM Security Bulletin: Vulnerabilities in OpenSSL affect Tivoli Provisioning Manager for OS Deployment and Tivoli Provisioning Manager for Images (CVE-2018-0737)

IBM Tivoli Provisioning Manager for OS Deployment has addressed the following vulnerability: Cache timing vulnerability in RSA Key Generation (CVE-2018-0737)

CVE(s): CVE-2018-0737

Affected product(s) and affected version(s):

Product	Affected Version
IBM Tivoli Provisioning Manager for OS Deployment	7.1.1.0-7.1.1.20
IBM Tivoli Provisioning Manager for OS Deployment	5.1.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10734847
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141679

The post IBM Security Bulletin: Vulnerabilities in OpenSSL affect Tivoli Provisioning Manager for OS Deployment and Tivoli Provisioning Manager for Images (CVE-2018-0737) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ibm.co/2Hozhdm