IBM Security Bulletin: Vulnerabilities in SSL affect IBM DataPower Gateways (CVE-2015-3193, CVE-2015-3195, CVE-2015-1794)

SSL vulnerabilities were disclosed on December 3rd, 2015. IBM DataPower Gateways has addressed the applicable CVEs.



CVE(s): CVE-2015-3193, CVE-2015-3195, CVE-2015-1794


Affected product(s) and affected version(s):

IBM DataPower Gateways appliances all versions through 7.0.0.12, 7.1.0.9, 7.2.0.5



Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/1sKwsJS
X-Force Database: http://ift.tt/1rd28Gc
X-Force Database: http://ift.tt/1QmYT4z
X-Force Database: http://ift.tt/1rd26hz


from IBM Product Security Incident Response Team http://ift.tt/1sKwOQB