Thursday, January 2, 2020

Security Bulletin: Potential side-channel cryptographic vulnerabilities in IBM DataPower Gateway

IBM DataPower Gateway is potentially vulnerable to two side-channel attacks (CVE-2018-0495, CVE-2018-12404)

Affected product(s) and affected version(s):

Affected Product(s) Version(s)
IBM DataPower Gateway 2018.4.1.0-2018.4.1.8
IBM DataPower Gateway 7.6.0.0-7.6.0.17

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/1167190

The post Security Bulletin: Potential side-channel cryptographic vulnerabilities in IBM DataPower Gateway appeared first on IBM PSIRT Blog.



from IBM Product Security Incident Response Team https://ift.tt/2ZSHrm4

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.