IBM Security Bulletin: Out of date encryption algorithms used in IBM BigFix Compliance Analytics (CVE-2017-1179)

IBM BigFix Compliance Analytics could allow a remote attacker to obtain sensitive information through man in the middle techniques due to using out of date encryption algorithms. IBM BigFix Compliance Analytics has remediated this vulnerability.

CVE(s): CVE-2017-1179

Affected product(s) and affected version(s):

IBM BigFix Security Compliance Analytics 1.9.70

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2s0dHW8
X-Force Database: http://ift.tt/2sztvMN

The post IBM Security Bulletin: Out of date encryption algorithms used in IBM BigFix Compliance Analytics (CVE-2017-1179) appeared first on IBM PSIRT Blog.



from IBM Product Security Incident Response Team http://ift.tt/2s0dIcE