IBM Security Bulletin: Vulnerabilities in OpenSSL affect IBM WebSphere Cast Iron Solution

OpenSSL vulnerabilities were disclosed on September 22 and 26, 2016 by the OpenSSL Project. OpenSSL is used by IBM WebSphere Cast Iron Solution. IBM WebSphere Cast Iron Solution has addressed the applicable CVEs.

CVE(s): CVE-2016-6302, CVE-2016-6304, CVE-2016-6303, CVE-2016-2182, CVE-2016-2177, CVE-2016-2178, CVE-2016-2179, CVE-2016-6306, CVE-2016-2181, CVE-2016-2183

Affected product(s) and affected version(s):

WebSphere Cast Iron v 7.5.1.0, v 7.5.0.1, v 7.5.0.0
WebSphere Cast Iron v 7.0.0.2, v 7.0.0.1, v 7.0.0.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2uizdXK
X-Force Database: http://ift.tt/2dR4fNY
X-Force Database: http://ift.tt/2dmY7tO
X-Force Database: http://ift.tt/2dmXjFz
X-Force Database: http://ift.tt/2dR45pA
X-Force Database: http://ift.tt/2aPXjQq
X-Force Database: http://ift.tt/2asKHex
X-Force Database: http://ift.tt/2dR5fBu
X-Force Database: http://ift.tt/2dmYpRr
X-Force Database: http://ift.tt/2dmXLUk
X-Force Database: http://ift.tt/2dR3VyC

The post IBM Security Bulletin: Vulnerabilities in OpenSSL affect IBM WebSphere Cast Iron Solution appeared first on IBM PSIRT Blog.



from IBM Product Security Incident Response Team http://ift.tt/2uz0xMy