IV70780: SECURITY APAR, MULTIPLE OPENSSL VULNERABILITIES IN TIVOLI ENDPOINT MANAGER FOR REMOTE CONTROL

APAR status

• Closed as program error.

Error description

• Tivoli Endpoint Manager for Remote Control version 8.2.1 is
  affected by security vulnerabilities in the OpenSSL libraries
  that are included with Tivoli Endpoint Manager for Remote
  Control.
  
  CVE ids:
  CVE-2014-3572
  CVE-2015-0204
  CVE-2015-0205
  

Local fix

• n/a
  

Problem summary

• Users affected:
  Target
  Broker
  Gateway
  CLI
  
  More information:
  http://www-01.ibm.com/support/docview.wss?uid=swg21698934
  

Problem conclusion

• This fix is included in the following maintenance package
  821-TIV-TEMRC821-IF0011
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TIV EP MGR REM

• Fixed component ID

  5725C43RC

Applicable component levels

• R820 PSY

     UP