Security Bulletin: A security vulnerability has been identified in muiltiple products shipped with Predictive Customer Intelligence (CVE-2015-4000)

Summary

WebSphere Application Server, Cognos Business Intelligence, Integration Bus, and WebSphere MQ are shipped as components of Predictive Customer Intelligence. Information about a security vulnerability affecting WebSphere Application Server, Cognos Business Intelligence, Integration Bus, and WebSphere MQ has been published in a security bulletin.

Vulnerability Details

Please consult the security bulletins:

Vulnerability in Diffie-Hellman ciphers affects IBM Cognos Business Intelligence (CVE-2015-4000)

Vulnerability with Diffie-Hellman ciphers may affect IBM WebSphere Application Server (CVE-2015-4000)

Vulnerability in Diffie-Hellman ciphers known as Logjam affects IBM WebSphere Message Broker and IBM Integration Bus (CVE-2015-4000)

Vulnerability in Diffie-Hellman ciphers affects IBM WebSphere MQ Telemetry (CVE-2015-4000)

for vulnerability details and information about fixes.

Affected Products and Versions

Principal Product and Version(s)

| Affected Supporting Product and Version
—|—
IBM Predictive Customer Intelligence 1.0| IBM Cognos Business Intelligence Server 10.2.1.1
WebSphere Application Server 8.5.5 ND
Integration Bus 9.0.0.1
WebSphere MQ 7.5.0.2
IBM Predictive Customer Intelligence 1.0.1| IBM Cognos Business Intelligence Server 10.2.1.1
WebSphere Application Server 8.5.5 ND
Integration Bus 9.0.0.1
WebSphere MQ 7.5.0.2