IBM Security Bulletin: Multiple vulnerabilities in Network Security Services (NSS) component affect SAN Volume Controller, Storwize family and FlashSystem V9000 products.
Vulnerabilities in Network Security Services (NSS) component affect IBM SAN Volume Controller, Storwize Family and FlashSystem V9000 products. Though the CVE descriptions below document the vulnerabilities in the context of the Mozilla product, the IBM SAN Volume Controller, Storwize Family and FlashSystem V9000 products have resolved the vulnerabilities in the context in which the underlying NSS service is used by these products. The applicable CVEs are CVE-2016-2834 CVE-2016-5285 CVE-2016-8635.
CVE(s): CVE-2016-2834, CVE-2016-5285, CVE-2016-8635
Affected product(s) and affected version(s):
IBM SAN Volume Controller
IBM Storwize V7000
IBM Storwize V5000
IBM Storwize V3700
IBM Storwize V3500
IBM FlashSystem V9000
All products are affected when running supported releases 7.1 to 7.8. For unsupported versions of the above products, IBM recommends upgrading to a fixed, supported version of the product.
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2q0e8Ks
X-Force Database: http://ift.tt/2j0FfXp
X-Force Database: http://ift.tt/2kdNFaI
X-Force Database: http://ift.tt/2j0ToUD
The post IBM Security Bulletin: Multiple vulnerabilities in Network Security Services (NSS) component affect SAN Volume Controller, Storwize family and FlashSystem V9000 products. appeared first on IBM PSIRT Blog.
from IBM Product Security Incident Response Team http://ift.tt/2q09YT7