IBM Security Bulletin: Multiple vulnerabilities in OpenSSL affects IBM InfoSphere Master Data Management
IBM Initiate Master Data Service and IBM InfoSphere Master Data Management are vulnerable to multiple OpenSSL denial of service attacks and could allow access to sensitive information.
CVE(s): CVE-2016-2177, CVE-2000-1254, CVE-2016-2178, CVE-2016-2180, CVE-2016-6303, CVE-2016-6302, CVE-2016-6305, CVE-2016-7052, CVE-2016-2182, CVE-2016-2179, CVE-2016-6306, CVE-2016-6307, CVE-2016-6308, CVE-2016-2181, CVE-2016-2183, CVE-2016-6309, CVE-2016-6304, CVE-2016-7053, CVE-2016-7054, CVE-2016-7055
Affected product(s) and affected version(s):
These vulnerabilities are known to affect the following offerings:
IBM Initiate Master Data Service versions 10.0 and 10.1
IBM InfoSphere Master Data Management Standard/Advanced Edition version 11.0, 11.3, 11.4, 11.5, and 11.6.
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2iIgFJM
X-Force Database: http://ift.tt/2aPXjQq
X-Force Database: http://ift.tt/2gJ8WYq
X-Force Database: http://ift.tt/2asKHex
X-Force Database: http://ift.tt/2dmWOvf
X-Force Database: http://ift.tt/2dmXjFz
X-Force Database: http://ift.tt/2dR4fNY
X-Force Database: http://ift.tt/2dR3XX1
X-Force Database: http://ift.tt/2dTp6vD
X-Force Database: http://ift.tt/2dR45pA
X-Force Database: http://ift.tt/2dR5fBu
X-Force Database: http://ift.tt/2dmYpRr
X-Force Database: http://ift.tt/2dR3Smm
X-Force Database: http://ift.tt/2dmYa8Y
X-Force Database: http://ift.tt/2dmXLUk
X-Force Database: http://ift.tt/2dR3VyC
X-Force Database: http://ift.tt/2fn8D82
X-Force Database: http://ift.tt/2dmY7tO
X-Force Database: http://ift.tt/2hjIa84
X-Force Database: http://ift.tt/2gUWszj
X-Force Database: http://ift.tt/2hjUUfe
from IBM Product Security Incident Response Team http://ift.tt/2j4z54a