Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBM40489FD654D3490738C1405EBC8608A52B0A582682D7CE46247662E1E7EB57A4
HistoryJul 30, 2018 - 5:06 p.m.

Security Bulletin: Vulnerability IBM GSKit affect IBM Host On-Demand

2018-07-3017:06:57
www.ibm.com
21

0.002 Low

EPSS

Percentile

51.7%

JSON

Summary

GSKit is an IBM component that is used by Host On-Demand. GSKit that is shipped with Host On-Demand contains security vulnerability. Host On-Demand has addressed it.

Vulnerability Details

CVEID: CVE-2016-0702 DESCRIPTION: OpenSSL could allow a local attacker to obtain sensitive information, caused by a side-channel attack against a system based on the Intel Sandy-Bridge microarchitecture. An attacker could exploit this vulnerability to recover RSA keys.
CVSS Base Score: 2.9
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/111144 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Host On-Demand 13.0

Host On-Demand 12.0, 12.0.0.1, 12.0.1, 12.0.2, 12.0.3

Remediation/Fixes

_ Product_ _ VRMF_ _ Remediation_
Host On-Demand 12.0 Upgrade to Host On-Demand 12.0.4
Host On-Demand 12.0.0.1 Upgrade to Host On-Demand 12.0.4
Host On-Demand 12.0.1 Upgrade to Host On-Demand 12.0.4
Host On-Demand 12.0.2 Upgrade to Host On-Demand 12.0.4
Host On-Demand 12.0.3 Upgrade to Host On-Demand 12.0.4
Host On-Demand 13.0 Upgrade to Host On-Demand 13.0.1

Workarounds and Mitigations

None

Related

cve 1
ibm 76
nvd 1
nessus 39
ubuntucve 1
prion 1
f5 2
cvelist 1
debiancve 1
veracode 1
openssl 1
fedora 2
openvas 30
freebsd 2
suse 15
ubuntu 1
centos 1
redhat 2
aix 2
cloudfoundry 1
oraclelinux 2
mageia 1
slackware 1
altlinux 4
debian 1
archlinux 2
gentoo 1
osv 1
freebsd_advisory 1
amazon 1
openwrt 1
cisco 1
arista 1
cve
cve
CVE-2016-0702
2016-03-03 20:59:00
ibm
ibm
Security Bulletin: Vulnerability in OpenSSL affects Watson Explorer (CVE-2016-0702)
2018-06-17 13:07:04
Security Bulletin: IBM MQ and IBM WebSphere MQ are affected by Side channel attacks on modular exponentiation (CVE-2016-0702)
2022-08-20 01:29:42
Security Bulletin: IBM Content Collector for SAP Application is affected by a side channel attack vulnerability in GSKit
2018-08-30 11:34:45
nvd
nvd
CVE-2016-0702
2016-03-03 20:59:00
nessus
nessus
F5 Networks BIG-IP : OpenSSL vulnerability (K79215841)
2016-08-30 00:00:00
openSUSE Security Update : libressl (openSUSE-2017-561)
2017-05-09 00:00:00
openSUSE Security Update : libressl (openSUSE-2017-560)
2017-05-09 00:00:00
ubuntucve
ubuntucve
CVE-2016-0702
2016-03-01 00:00:00
prion
prion
Design/Logic Flaw
2016-03-03 20:59:00
f5
f5
SOL79215841 - OpenSSL vulnerability CVE-2016-0702
2016-03-23 00:00:00
K79215841 : OpenSSL vulnerability CVE-2016-0702
2016-03-23 00:00:00
cvelist
cvelist
CVE-2016-0702
2016-03-03 00:00:00
debiancve
debiancve
CVE-2016-0702
2016-03-03 20:59:00
veracode
veracode
Side Channel Attack On Modular Exponentiation
2017-01-26 08:01:41
openssl
openssl
Vulnerability in OpenSSL CVE-2016-0702
2016-03-01 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: openssl-1.0.2g-2.fc23
2016-03-03 20:27:06
[SECURITY] Fedora 22 Update: openssl-1.0.1k-14.fc22
2016-03-13 09:57:52
openvas
openvas
Fedora Update for openssl FEDORA-2016-2802690366
2016-03-04 00:00:00
Ubuntu: Security Advisory (USN-2914-1)
2016-03-02 00:00:00
CentOS Update for openssl CESA-2016:0301 centos7
2016-03-02 00:00:00
freebsd
freebsd
node -- multiple vulnerabilities
2016-03-02 00:00:00
FreeBSD -- Multiple OpenSSL vulnerabilities
2016-03-10 00:00:00
suse
suse
Security update for compat-openssl098 (important)
2016-05-11 00:07:42
Security update for openssl (important)
2016-05-19 19:09:52
Security update for compat-openssl098 (important)
2016-05-09 12:08:04
ubuntu
ubuntu
OpenSSL vulnerabilities
2016-03-01 00:00:00
centos
centos
openssl security update
2016-03-01 16:09:29
redhat
redhat
(RHSA-2016:0301) Important: openssl security update
2016-03-01 00:00:00
(RHSA-2016:0379) Important: rhev-hypervisor security, bug fix and enhancement update
2016-03-09 00:00:00
aix
aix
Vulnerabilities in GSKit affect IBM Tivoli Directory Server and IBM Security Directory Server for AIX
2018-12-14 12:09:04
Multiple vulnerabilities in OpenSSL affect AIX
2016-04-04 11:04:25
cloudfoundry
cloudfoundry
USN-2914-1 OpenSSL vulnerabilities | Cloud Foundry
2016-03-24 00:00:00
oraclelinux
oraclelinux
openssl security update
2016-03-01 00:00:00
openssl security update
2016-03-01 00:00:00
mageia
mageia
Updated openssl packages fix security vulnerabilities
2016-03-02 21:28:46
slackware
slackware
[slackware-security] openssl
2016-03-03 06:56:40
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 1.0.2g-alt1
2016-03-01 00:00:00
Security fix for the ALT Linux 7 package openssl10 version 1.0.1s-alt0.M70P.1
2016-03-02 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.2g-alt1
2016-03-01 00:00:00
debian
debian
[SECURITY] [DSA 3500-1] openssl security update
2016-03-01 14:34:35
archlinux
archlinux
lib32-openssl: multiple issues
2016-03-07 00:00:00
openssl: multiple issues
2016-03-07 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2016-03-20 00:00:00
osv
osv
openssl - security update
2016-03-01 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-16:12.openssl
2016-03-10 00:00:00
amazon
amazon
Important: openssl
2016-03-10 16:30:00
openwrt
openwrt
openssl: Security update (9 CVEs)
2016-03-01 16:52:09
cisco
cisco
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016
2016-03-02 12:30:00
arista
arista
Security Advisory 0018
2016-03-01 00:00:00

0.002 Low

EPSS

Percentile

51.7%

JSON
Related for 40489FD654D3490738C1405EBC8608A52B0A582682D7CE46247662E1E7EB57A4
cve1ibm76nvd1nessus39ubuntucve1prion1f52cvelist1debiancve1veracode1openssl1fedora2openvas30freebsd2suse15ubuntu1centos1redhat2aix2cloudfoundry1oraclelinux2mageia1slackware1altlinux4debian1archlinux2gentoo1osv1freebsd_advisory1amazon1openwrt1cisco1arista1