Security Bulletin: Vulnerability in Libcurl affects IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru Firmware and QLogic Virtual Fabric Extension Module for IBM BladeCenter (CVE-2016-0755)

Summary The switch firmware deliverables listed below have addressed the applicable NTP CVEs. Vulnerability Details Summary The switch firmware deliverables listed below have addressed the applicable NTP CVEs. Vulnerability Details CVE-ID: CVE-2016-0755 Description: Libcurl could allow a remote...

Security Bulletin: Vulnerability in SSLv3 and OpenSSL affect SAN Volume Controller and Storwize Family (CVE-2014-3566 CVE-2014-3567)

Summary Security Bulletin: Vulnerabilities in Bash affect SAN Volume Controller and Storwize Family CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278 Vulnerability Details Security Bulletin --- Summary --- There are security vulnerabilities in SSLv3 that is...

Security Bulletin: Vulnerability in SSLv3 and OpenSSL affect SAN Volume Controller and Storwize Family (CVE-2014-3566 CVE-2014-3567)

Summary There are security vulnerabilities in SSLv3 that is used by SAN Volume Controller and Storwize Family. In addition, OpenSSL vulnerabilities along with SSL 3 Fallback protection TLSFALLBACKSCSV were disclosed on October 15, 2014 by the OpenSSL Project. OpenSSL is used by SAN Volume...

Security Bulletin: IBM Flex System switch firmware products are affected by a vulnerability in glibc (CVE-2021-35942)

Summary The following vulnerability in glibc has been addressed by IBM Flex System switch firmware products. Vulnerability Details CVEID:CVE-2021-35942 DESCRIPTION: GNU C Library aka glibc could allow a local attacker to obtain sensitive information, caused by a flaw when called with an untrusted...

Security Bulletin: Avoiding Weak SSL/TLS Encryption in IBM System x and Flex Systems (CVE-2013-4030)

Summary Encryption with symmetric keys shorter than 128 bits is considered more vulnerable to attack than encryption with keys 128 bits or longer. Several SSL/TLS cipher suites include encryption with keys shorter than 128 bits. Vulnerability Details Abstract Encryption with symmetric keys shorte...

Security Bulletin: Flex System Manager web server allows Generic XSS (CVE-2013-5438)

Summary The Flex System Manager FSM is running a web server that fails to adequately sanitize request strings of malicious JavaScript. Vulnerability Details Abstract The Flex System Manager FSM is running a web server that fails to adequately sanitize request strings of malicious JavaScript...

Security Bulletin: IBM Flex System Manger expired USERID password vulnerability (CVE-2013-5424)

Summary Abstract Security Bulletin: IBM Flex System Manger expired USERID password vulnerability CVE-2013-5424 Content Vulnerability Details: CVE ID: CVE-2013-5424. Description: All affected versions of the Flex System Manager FSM are vulne Vulnerability Details Abstract Security Bulletin: IBM Fl...

Security Bulletin: IBM System x and Flex Systems Browser Exploit Against SSL/TLS (BEAST) Mitigations (CVE-2011-3389)

Summary Security Bulletin: IBM System x and Flex Systems Browser Exploit Against SSL/TLS BEAST Mitigations CVE-2011-3389 Vulnerability Details Summary The SSL 3.0 and TLS 1.0 protocols when used with Cipher Block Chaining CBC mode with chained initialization vectors may allow man-in-the-middle...

Security Bulletin: IBM has released Unified Extensible Firmware Interface (UEFI) fixes in response to Intel escalation of privilege vulnerability.

Summary IBM has released the Unified Extensible Firmware Interface UEFI fixes for System x, Flex and BladeCenter systems in response to the following Intel escalation of privilege vulnerability. Vulnerability Details CVEID: CVE-2019-0151 DESCRIPTION: Insufficient memory protection in IntelR TXT f...

Security Bulletin: Vulnerabilities in cURL affect IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru (CVE-2017-8816 CVE-2017-8817 CVE-2017-8818)

Summary IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru has addressed the following vulnerabilities in cURL. Vulnerability Details Summary IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru has addressed the following vulnerabilities in cURL. Vulnerability Details CVEID: CVE-2017-881...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru (CVE-2017-3737 CVE-2017-3738)

Summary IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru hase addressed the following vulnerabilities in OpenSSL. Vulnerability Details Summary IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru hase addressed the following vulnerabilities in OpenSSL. Vulnerability Details CVEID:...

Security Bulletin: Vulnerability in Enterprise Networking Operating System (ENOS) affects IBM Flex System Networking Switch Products (CVE-2017-3765)

Summary IBM Flex System Networking Switch Products have addressed the following vulnerability in Enterprise Networking Operating System ENOS. Vulnerability Details Summary IBM Flex System Networking Switch Products have addressed the following vulnerability in Enterprise Networking Operating Syst...

Security Bulletin: IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru is affected by vulnerability in OpenSLP (CVE-2017-17833)

Summary The following vulnerability in OpenSLP has been addressed by IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru firmware. Vulnerability Details Summary The following vulnerability in OpenSLP has been addressed by IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru firmware...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Unified Extensible Firmware Interface (UEFI) (CVE-2017-3735 CVE-2017-3736)

Summary IBM Unified Extensible Firmware Interface UEFI has addressed the following vulnerabilities in OpenSSL. Vulnerability Details Summary IBM Unified Extensible Firmware Interface UEFI has addressed the following vulnerabilities in OpenSSL. Vulnerability Details CVEID: CVE-2017-3735 Descriptio...

Security Bulletin: Vulnerability in OpenSSH affects IBM Flex System FC5022 16Gb SAN Scalable Switch (CVE-2016-6210)

Summary IBM Flex System FC5022 16Gb SAN Scalable Switch has addressed the following vulnerability in OpenSSH. Vulnerability Details Summary IBM Flex System FC5022 16Gb SAN Scalable Switch has addressed the following vulnerability in OpenSSH. Vulnerability Details: CVEID: CVE-2016-6210 Description...

Security Bulletin: Vulnerabilities in libxml2 affect IBM Flex System Networking Switch Products

Summary IBM Flex System Networking Switch Products have addressed the following vulnerabilities in libxml2. Vulnerability Details Summary IBM Flex System Networking Switch Products have addressed the following vulnerabilities in libxml2. Vulnerability Details CVEID: CVE-2017-9050 Description:...

Security Bulletin: Vulnerability in NTP affects IBM Flex System Chassis Management Module (CVE-2015-5300)

Summary IBM Flex System Chassis Management Module CMM has addressed the following vulnerability in NTP. Vulnerability Details Summary IBM Flex System Chassis Management Module CMM has addressed the following vulnerability in NTP. Vulnerability Details: CVE-ID: CVE-2015-5300 Description: Network...

Security Bulletin: Vulnerabilities in OpenSSH affect IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch Firmware (CVE-2016-0777, CVE-2016-0778)

Summary An information leak flaw and buffer overflow flaw in the way the OpenSSH client roaming feature was implemented affects IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch Firmware. Vulnerability Details Summary An information leak flaw and buffer overflow flaw in the way...

Security Bulletin: Vulnerability in GNU C Library affects IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch Firmware (CVE-2016-3706)

Summary IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch Firmware has addressed the following vulnerability in GNU C Library. Vulnerability Details Summary IBM Flex System EN6131 40Gb Ethernet / IB6131 40Gb Infiniband Switch Firmware has addressed the following vulnerability i...

Security Bulletin: Vulnerability in ICU affects IBM Flex System Chassis Management Module (CMM)

Summary IBM Chassis Management Module CMM has addressed the following vulnerability in ICU. Vulnerability Details Summary IBM Chassis Management Module CMM has addressed the following vulnerability in ICU. Vulnerability Details CVEID: CVE-2014-9911 Description: International Components for Unicod...