Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBM762617D611F88A799B689B6B3E1C033FD35BF7C43760B0AEF360F438F510D1B0
HistoryJun 17, 2018 - 12:16 p.m.

Security Bulletin: Vulnerabilities in OpenSSL affect StoredIQ (CVE-2016-2107)

2018-06-1712:16:02
www.ibm.com
11

0.967 High

EPSS

Percentile

99.7%

JSON

Summary

OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by StoredIQ. StoredIQ has addressed the applicable CVEs.

Vulnerability Details

CVEID: CVE-2016-2107 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error when the connection uses an AES CBC cipher and the server support AES-NI. A remote user with the ability to conduct a man-in-the-middle attack could exploit this vulnerability via the POODLE (Padding Oracle On Downgraded Legacy Encryption) attack to decrypt traffic.
CVSS Base Score: 4.3
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/112854 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)

Affected Products and Versions

StoredIQ v7.6

Remediation/Fixes

Product

| VRMF| APAR| Remediation/First Fix
—|—|—|—
StoredIQ| 7.6| N/A| Fix is available in 7.6.0 Fix Pack 8 on Fix Central.

Workarounds and Mitigations

None

CPENameOperatorVersion
storediqeq7.6

Related

ibm 62
hackerone 3
threatpost 1
nessus 37
zdt 1
checkpoint_advisories 1
openvas 30
seebug 1
redhatcve 1
cve 1
ubuntucve 1
veracode 1
debiancve 1
f5 4
openssl 1
alpinelinux 1
citrix 1
kitploit 1
thn 1
osv 3
cvelist 1
nvd 1
prion 1
mageia 1
fedora 5
suse 8
altlinux 5
amazon 1
cloudfoundry 1
ubuntu 1
paloalto 1
freebsd_advisory 1
debian 2
archlinux 2
cisco 1
arista 1
fortinet 1
huawei 1
freebsd 1
slackware 1
redhat 3
oraclelinux 3
symantec 1
centos 2
ibm
ibm
Security Bulletin: A vulnerability in OpenSSL affects the IBM FlashSystem models 840 and 900 (CVE-2016-2107)
2023-02-18 01:45:50
Security Bulletin: Vulnerability in OpenSSL affects IBM Rational ClearCase (CVE-2016-2107)
2018-07-10 08:34:12
Security Bulletin: Vulnerability in OpenSSL affects Watson Explorer (CVE-2016-2107)
2018-06-17 13:07:13
hackerone
hackerone
Internet Bug Bounty: Padding oracle in AES-NI CBC MAC check (CVE-2016-2107)
2016-05-07 16:35:28
FormAssembly: formassembly.com is vulnerable to padding-oracle attacks.
2017-01-10 13:38:12
LocalTapiola: OpenSSL Padding Oracle Attack (CVE-2016-2107) on viestinta.lahitapiola.fi
2016-12-30 07:16:36
threatpost
threatpost
OpenSSL Patches Padding Oracle Attack Bug
2016-05-03 12:17:47
nessus
nessus
OpenSSL AES-NI Padding Oracle MitM Information Disclosure
2016-06-13 00:00:00
F5 Networks BIG-IP : OpenSSL vulnerability (K93600123)
2016-11-21 00:00:00
Oracle Enterprise Manager Cloud Control Multiple Vulnerabilities (July 2016 CPU)
2016-07-27 00:00:00
zdt
zdt
OpenSSL - Padding Oracle in AES-NI CBC MAC Check
2016-05-04 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenSSL Padding Oracle Information Disclosure (CVE-2016-2107)
2016-05-09 00:00:00
openvas
openvas
SSL/TLS: OpenSSL 'CVE-2016-2107' Padding Oracle Vulnerability
2017-03-30 00:00:00
Fedora Update for openssl FEDORA-2016-1411324654
2016-05-08 00:00:00
Mageia: Security Advisory (MGASA-2016-0169)
2016-05-09 00:00:00
seebug
seebug
OpenSSL Padding oracle in AES-NI CBC MAC check (CVE-2016-2107)
2016-05-04 00:00:00
redhatcve
redhatcve
CVE-2016-2107
2016-05-03 14:48:50
cve
cve
CVE-2016-2107
2016-05-05 01:59:03
ubuntucve
ubuntucve
CVE-2016-2107
2016-05-03 00:00:00
veracode
veracode
Padding Oracle Attack
2017-01-27 03:10:31
debiancve
debiancve
CVE-2016-2107
2016-05-05 01:59:03
f5
f5
SOL93600123 - OpenSSL vulnerability CVE-2016-2107
2016-05-06 00:00:00
K93600123 : OpenSSL vulnerability CVE-2016-2107
2016-05-07 00:00:00
SOL07538415 - Multiple OpenSSL vulnerabilities
2016-05-03 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2016-2107
2016-05-03 00:00:00
alpinelinux
alpinelinux
CVE-2016-2107
2016-05-05 01:59:03
citrix
citrix
Citrix XenServer 7.2 Multiple Security Updates
2018-03-29 04:00:00
kitploit
kitploit
yawast - The YAWAST Antecedent Web Application Security Toolkit
2016-10-16 14:12:00
thn
thn
High-Severity OpenSSL Vulnerability allows Hackers to Decrypt HTTPS Traffic
2016-05-04 23:31:00
osv
osv
CVE-2016-2107
2016-05-05 01:59:00
openssl - security update
2016-05-03 00:00:00
openssl - security update
2016-05-03 00:00:00
cvelist
cvelist
CVE-2016-2107
2016-05-05 00:00:00
nvd
nvd
CVE-2016-2107
2016-05-05 01:59:03
prion
prion
Design/Logic Flaw
2016-05-05 01:59:00
mageia
mageia
Updated openssl packages fix security vulnerability
2016-05-08 00:22:48
fedora
fedora
[SECURITY] Fedora 22 Update: openssl-1.0.1k-15.fc22
2016-05-10 17:58:11
[SECURITY] Fedora 23 Update: openssl-1.0.2h-1.fc23
2016-05-04 18:54:36
[SECURITY] Fedora 24 Update: openssl-1.0.2h-1.fc24
2016-05-07 12:15:14
suse
suse
Security update for openssl1 (important)
2016-05-03 22:08:22
Security update for openssl (important)
2016-05-04 16:14:12
Security update for openssl (important)
2016-05-05 13:08:31
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.2h-alt1
2016-05-03 00:00:00
Security fix for the ALT Linux 10 package openssl1.1 version 1.0.2h-alt1
2016-05-03 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 1.0.2h-alt1
2016-05-04 00:00:00
amazon
amazon
Important: openssl
2016-05-03 10:30:00
cloudfoundry
cloudfoundry
USN-2959-1 OpenSSL vulnerabilities | Cloud Foundry
2016-05-06 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2016-05-03 00:00:00
paloalto
paloalto
OpenSSL Vulnerabilities
2016-09-02 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-16:17.openssl
2016-05-04 00:00:00
debian
debian
[SECURITY] [DSA 3566-1] openssl security update
2016-05-03 18:24:21
[SECURITY] [DLA 456-1] openssl security update
2016-05-03 20:53:46
archlinux
archlinux
lib32-openssl: multiple issues
2016-05-04 00:00:00
openssl: multiple issues
2016-05-04 00:00:00
cisco
cisco
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: May 2016
2016-05-04 19:30:00
arista
arista
Security Advisory 0020
2016-05-06 00:00:00
fortinet
fortinet
OpenSSL Advisory - May 2016
2016-09-22 00:00:00
huawei
huawei
Security Advisory - Multiple Vulnerabilities in OpenSSL in May 2016
2016-07-06 00:00:00
freebsd
freebsd
OpenSSL -- multiple vulnerabilities
2016-05-03 00:00:00
slackware
slackware
[slackware-security] openssl
2016-05-03 21:05:31
redhat
redhat
(RHSA-2016:2073) Important: openssl security update
2016-10-18 06:21:20
(RHSA-2016:0996) Important: openssl security update
2016-05-10 07:00:21
(RHSA-2016:0722) Important: openssl security update
2016-05-09 04:44:04
oraclelinux
oraclelinux
openssl security update
2016-05-13 00:00:00
openssl security update
2016-05-09 00:00:00
openssl-fips security update
2016-06-15 00:00:00
symantec
symantec
SA123 : OpenSSL Vulnerabilities 3-May-2016
2016-05-09 08:00:00
centos
centos
openssl security update
2016-05-09 08:40:50
openssl security update
2016-05-16 10:25:52

0.967 High

EPSS

Percentile

99.7%

JSON
Related for 762617D611F88A799B689B6B3E1C033FD35BF7C43760B0AEF360F438F510D1B0
ibm62hackerone3threatpost1nessus37zdt1checkpoint_advisories1openvas30seebug1redhatcve1cve1ubuntucve1veracode1debiancve1f54openssl1alpinelinux1citrix1kitploit1thn1osv3cvelist1nvd1prion1mageia1fedora5suse8altlinux5amazon1cloudfoundry1ubuntu1paloalto1freebsd_advisory1debian2archlinux2cisco1arista1fortinet1huawei1freebsd1slackware1redhat3oraclelinux3symantec1centos2