Security Bulletin: Multiple vulnerabilities have been identified in IBM Tivoli Netcool/OMNIbus Probe for Network Node Manager i (CVE-2009-3555)

Summary

Information about security vulnerabilities affecting IBM Tivoli Netcool/OMNIbus Probe for Network Node Manager i is published in the details below.

Vulnerability Details

CVEID:CVE-2009-3555
**DESCRIPTION:**Multiple implementations of the Transport Layer Security (TLS) protocol, including SSL, could provide weaker than expected security, caused by TLS handshake renegotiation. A remote attacker could exploit this vulnerability via man-in-the-middle techniques to inject data into the beginning of the application protocol stream to execute HTTP transactions, bypass authentication and possibly launch further attacks against the victim.
CVSS Base score: 4
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/54158 for the current score.
CVSS Vector: (AV:N/AC:H/Au:N/C:P/I:P/A:N)

**Third Party Entry:**PSIRT-ADV0022327
**DESCRIPTION:**Created from Advisory: ADV0022327
CVSS Base score: 6.5
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

**Third Party Entry:**PSIRT-ADV0022328
**DESCRIPTION:**Created from Advisory: ADV0022328
CVSS Base score: 8.2
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Affected Products and Versions

Remediation/Fixes

Workarounds and Mitigations

None