Security Bulletin: Vulnerabilities in OpenSSL and MD5 Signature and Hash Algorithm (CVE-2015-7575) affect IBM System Networking RackSwitch products.

Summary IBM System Networking RackSwitch products listed below have addressed the following vulnerabilities, including the MD5 "SLOTH" vulnerability on TLS 1.2. Vulnerability Details Summary IBM System Networking RackSwitch products listed below have addressed the following vulnerabilities,...

Security Bulletin: Vulnerability in NTP affects IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch firmware (CVE-2015-8138)

Summary IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch firmware has addressed the following vulnerability in NTP. Vulnerability Details Summary IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch firmware has addressed the following vulnerability in NTP...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM System x, BladeCenter and Flex Systems Unified Extensible Firmware Interface (UEFI) (CVE-2015-1789 CVE-2015-1790 CVE-2015-1792)

Summary OpenSSL vulnerabilities were disclosed on June 11, 2015 by the OpenSSL Project. OpenSSL is used by IBM System x, BladeCenter and Flex Systems Unified Extensible Firmware Interface. IBM System x, BladeCenter and Flex Systems Unified Extensible Firmware Interface UEFI have addressed the...

Security Bulletin: Vulnerabilities in libxml2 affect IBM RackSwitch Networking products

Summary IBM RackSwitch Networking products have addressed the following vulnerabilities in libxml2. Vulnerability Details Summary IBM RackSwitch Networking products have addressed the following vulnerabilities in libxml2. Vulnerability Details: CVE-ID: CVE-2016-3627 Description: libxml2 is...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Fabric Manager (IFM)

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition, Version 7 that is used by IBM Fabric Manager IFM. These issues were disclosed as part of the IBM Java SDK updates for October 2015. Vulnerability Details Summary There are multiple vulnerabilities in IBM® SDK Java™...

Security Bulletin: Logjam vulnerability affects IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch firmware (CVE-2015-4000)

Summary OpenSSL vulnerabilities were disclosed on June 11, 2015 by the OpenSSL Project. This includes Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol CVE-2015-4000. OpenSSL is used by IBM Flex System EN6131 40Gb Ethernet /IB6131 40Gb Infiniband Switch firmware...

Security Bulletin: Multiple vulnerabilities in GNU C Library (glibc), OpenSSL and NTP affect IBM Flex System Chassis Management Module (CMM)

Summary Vulnerabilities in GNU C Library glibc, OpenSSL and NTP affect IBM Flex System Chassis Management Module. IBM Flex System Chassis Management Module has addressed the CVEs listed below. Vulnerability Details Summary Vulnerabilities in GNU C Library glibc, OpenSSL and NTP affect IBM Flex...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM BladeCenter Switches (CVE-2015-1788, CVE-2015-1789, CVE-2015-1792)

Summary The following OpenSSL vulnerabilities are addressed by the IBM BladeCenter Switches listed below. Vulnerability Details Summary The following OpenSSL vulnerabilities are addressed by the IBM BladeCenter Switches listed below. Vulnerability Details: CVE-ID: CVE-2015-1788 Description: OpenS...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Flex System Manager (FSM)

Summary There are multiple vulnerabilities in IBM Runtime Environment Java Technology Edition, Version 6 and 7 that is used by IBM Flex System Manager. These issues were disclosed as part of the IBM Java SDK updates in January 2015. Vulnerability Details Summary There are multiple vulnerabilities...

Security Bulletin: Vulnerability in RC4 stream cipher affects IBM Flex System Chassis Management Module (CVE-2015-2808)

Summary The RC4 "Bar Mitzvah" Attack for SSL/TLS affects IBM Flex System Chassis Management Module. Vulnerability Details Summary The RC4 "Bar Mitzvah" Attack for SSL/TLS affects IBM Flex System Chassis Management Module. Vulnerability Details: CVE-ID: CVE-2015-2808 Description: The RC4 algorithm...

Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Systems Director (CVE-2015-4000)

Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affects IBM Systems Director. Vulnerability Details Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affects IBM Systems Director. Vulnerability Details...

Security Bulletin: Multiple vulnerabilities affect IBM System Networking Switch Center (CVE-2015-7817, CVE-2015-7818, CVE-2015-7819, CVE-2015-7820)

Summary There are multiple vulnerabilities in IBM System Networking Switch Center. Vulnerability Details Summary There are multiple vulnerabilities in IBM System Networking Switch Center. Vulnerability Details CVE-ID: CVE-2015-7817 Description: IBM System Networking Switch Center could allow a...

Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by multiple vulnerabilities in OpenSSL including Logjam

Summary OpenSSL vulnerabilities were disclosed on June 11, 2015 by the OpenSSL Project. This includes Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol CVE-2015-4000. OpenSSL is used by IBM Flex Chassis Management Module CMM. Flex Chassis Management Module has...

Security Bulletin: Multiple vulnerabilities in IBM SDK Java Technology Edition affect IBM Systems Director Editions

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition that affects Tivoli Common Reporting, Tivoli Provisioning Manager for OS deployment and IBM Systems Director which are shipped as part of IBM Systems Director Editions. These issues were disclosed as part of the IBM Jav...

Security Bulletin: Vulnerability in IBM Java Runtime affects IBM Flex System Manager (FSM) (CVE-2015-0138)

Summary The FREAK: Factoring Attack on RSA-EXPORT keys TLS/SSL client and server vulnerability affects IBM Runtime Environment Java Technology Edition, Version 1.6 and 1.7 that are used by IBM Flex System Manager FSM. Vulnerability Details Summary The FREAK: Factoring Attack on RSA-EXPORT keys...

Security Bulletin: Multiple vulnerabilities in Oracle Java SE Runtime Environment, Version 1.7.0 affect IBM Flex System Manager (FSM) SMIA Configuration Tool (CVE-2015-0488, CVE-2015-0478)

Summary There are multiple vulnerabilities in Oracle Java SE Runtime Environment, Version 1.7.0 that is used by IBM Flex System Manager FSM SMIA Configuration Tool. These issues were disclosed as part of the Oracle updates in April 2015. Vulnerability Details Summary There are multiple...

Security Bulletin: Vulnerability in OpenSSL affects IBM Flex System Networking Switches (CVE-2015-0286)

Summary An OpenSSL vulnerability affects IBM Flex System Networking Switches. The IBM Flex System Networking Switches listed below have addressed the CVE. Vulnerability Details Summary An OpenSSL vulnerability affects IBM Flex System Networking Switches. The IBM Flex System Networking Switches...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Flex System Networking Switches (CVE-2015-1788, CVE-2015-1789, CVE-2015-1792)

Summary The following OpenSSL vulnerabilities are addressed by the IBM Flex System Networking Switches listed below. Vulnerability Details Summary The following OpenSSL vulnerabilities are addressed by the IBM Flex System Networking Switches listed below. Vulnerability Details: CVE-ID:...

Security Bulletin: Vulnerability in RC4 cipher stream and multiple vulnerabilities in IBM SDK Java Technology Edition affects IBM Systems Director

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition 7 that is used by IBM Systems Director. These issues were disclosed as part of the IBM Java SDK updates in January and April 2015. This bulletin also addresses the RC4 bar mitzvah attack on SSL/TLS. Vulnerability Detail...

Security Bulletin: Vulnerability with Diffie-Hellman ciphers may affect Juniper EX Series Network Switches sold by IBM for use in IBM Products (CVE-2015-4000)

Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affects Juniper EX Series Network Switches sold by IBM for use in IBM Products. Vulnerability Details Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affec...