IBM Security Bulletin: Vulnerability in MD5 Signature Hash affects IBM b-type SAN switches and directors (CVE-2015-7575)

The MD5 “SLOTH” vulnerability on TLS 1.2 affects IBM b-type SAN switches and directors.

CVE(s): CVE-2015-7575

Affected product(s) and affected version(s):

IBM b-type SAN switches and directors running Fabric Operating System (FOS) firmware FOS 7.4.1a and earlier.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/1UhQQbh
X-Force Database: http://ift.tt/1TnIyR8



from IBM Product Security Incident Response Team http://ift.tt/1RQx9Fr