IBM Security Bulletin: Vulnerabilities in OpenSSL affect IBM Cognos TM1 including a vulnerabiltiy in the RC4 stream ciphers (CVE-2015-2808, CVE-2014-3569).

OpenSSL vulnerabilities were disclosed on January 8, 2015 by the OpenSSL Project. OpenSSL is used by IBM Cognos TM1. IBM Cognos TM1 has addressed the applicable CVE. The RC4 “Bar Mitzvah” Attack for SSL/TLS affects IBM Cognos TM1 ...

from IBM Product Security Incident Response Team http://ift.tt/1QLV2QN