IBM Security Bulletin: Selection of Less-Secure Algorithm During Negotiation vulnerability affects IBM Security Guardium (CVE-2017-1271)

IBM Security Guardium supports interaction between multiple actors but does not select the strongest algorithm that is available to both parties. IBM Security Guardium has provided a fix for this vulnerability.

CVE(s): CVE-2017-1271

Affected product(s) and affected version(s):

IBM Security Guardium V9.0, 9.1, 9.5

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2ABZUJg
X-Force Database: http://ift.tt/2iGcqjX

The post IBM Security Bulletin: Selection of Less-Secure Algorithm During Negotiation vulnerability affects IBM Security Guardium (CVE-2017-1271) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2AB01VB