IBM Security Bulletin: Vulnerabilities in OpenSSL Affect IBM Sterling Connect:Direct for HP NonStop (CVE-2017-3736)

OpenSSL vulnerabilities were disclosed on November 2, 2017 by the OpenSSL Project. OpenSSL is used by IBM Sterling Connect:Direct for HP NonStop. IBM Sterling Connect:Direct for HP NonStop has addressed the applicable CVE.

CVE(s): CVE-2017-3736

Affected product(s) and affected version(s):

IBM Sterling Connect:Direct for HP NonStop 3.6.0.0
IBM Sterling Connect:Direct for HP NonStop 3.6.0.1
IBM Sterling Connect:Direct for HP NonStop 3.6.0.2

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2FQxjjp
X-Force Database: http://ift.tt/2Dnm0hn

The post IBM Security Bulletin: Vulnerabilities in OpenSSL Affect IBM Sterling Connect:Direct for HP NonStop (CVE-2017-3736) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2rfAmOQ