IBM Security Bulletin: OpenStack vulnerabilities affect IBM Cloud Manager with Openstack (CVE-2015-7548, CVE-2015-8749 CVE-2015-1850)

IBM Cloud Manager with Openstack is vulnerable to several Openstack Nova vulerabilities, which could allow a local authenticated attacker or a remote attacker to obtain sensitive information

CVE(s): CVE-2015-8749, CVE-2015-7548, CVE-2015-1850

Affected product(s) and affected version(s):

IBM Cloud Manager with OpenStack 4.1.0 through 4.1.0.5 interim fix 2

IBM Cloud Manager with OpenStack 4.2.0 through 4.2.0.3 interim fix 6
IBM Cloud Manager with OpenStack 4.3.0 through 4.3.0.6 interim fix 1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2b5AOak
X-Force Database: http://ift.tt/2b7FDQP
X-Force Database: http://ift.tt/2amgkpR
X-Force Database: http://ift.tt/2aJAi1m

from IBM Product Security Incident Response Team http://ift.tt/2b5AMyZ