IBM Security Bulletin: Vulnerabilities in OpenSSL affect Rational Insight

OpenSSL vulnerabilities were disclosed on January 26, 2017 by the OpenSSL Project. OpenSSL is used by Rational Insight. Rational Insight has addressed the applicable CVEs.

CVE(s): CVE-2017-3730, CVE-2017-3731, CVE-2017-3732, CVE-2016-7055

Affected product(s) and affected version(s):

Principal Product and Version(s)Affected Supporting Product(s) and Version(s)
Rational Insight 1.1, 1.1.1, 1.1.1.1 and 1.1.1.2Cognos BI 10.1.1
Rational Insight 1.1.1.3Cognos BI 10.2.1
Rational Insight 1.1.1.4, 1.1.1.5 and 1.1.1.6Cognos BI 10.2.1 Fix pack 2
Jazz Reporting Service 5.0, 5.0.1 and 5.0.2
Rational Insight 1.1.1.7Cognos BI 10.2.1 Fix pack 2
Jazz Reporting Service 6.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2vC2xEM
X-Force Database: http://ift.tt/2kDB4yh
X-Force Database: http://ift.tt/2knsB3D
X-Force Database: http://ift.tt/2kDymIW
X-Force Database: http://ift.tt/2hjUUfe

The post IBM Security Bulletin: Vulnerabilities in OpenSSL affect Rational Insight appeared first on IBM PSIRT Blog.



from IBM Product Security Incident Response Team http://ift.tt/2vCfnTq