HP MOE/CSM SSLv3 (POODLE) Vulnerability Advisory (CVE-2014-3508/3509/3511/3513/3566/3567/3568/5139)

Critical Vulnerability Information Vulnerability Summary Affected Software: HP Matrix Operating Environment and HP CloudSystem Matrix, running OpenSSL. Vulnerability Type: SSLv3 vulnerability, also known as "Poodle" or "Padding Oracle on Downgraded Legacy Encryption", exploitable remotely leading to information disclosure. Reference Identifiers CVEs: CVE-2014-3508, CVE-2014-3509, CVE-2014-3511, CVE-2014-3513, CVE-2014-3566, CVE-2014-3567, CVE-2014-3568, CVE-2014-5139 HP Internal References: SSRT101894 and other internal identifiers Affected Versions HP CloudSystem Matrix (CSM): v7.2.0 to v7.4.0 HP Matrix Operating Environment (MOE): v7.2.0 to v7.4.0 Additional impacted components and versions are detailed in the full bulletin. Remediation HP has released specific software updates to address these vulnerabilities. Detailed update packages and installation instructions are included in the bulletin, along with individual security advisories for each affected software component. Emphasis is placed on reading the readme.txt file before installation. CVSS 2.0 Scores Includes base vectors and base scores for each CVE, indicating the severity and exploitability of the vulnerabilities. Fix Links and History Provides links to relevant security advisories and historical update records for tracking and accessing the latest details. Additional Warnings and Recommendations Installation of third-party patches must follow respective patch management policies. Official contact information is provided for further support, vulnerability reporting, and subscribing to future security advisories. Security Recommendation Immediately update affected system components to the latest versions to avoid potential information disclosure risks.

Goal Reached Thanks to every supporter — we hit 100%!

HP MOE/CSM SSLv3 (POODLE) Vulnerability Advisory (CVE-2014-3508/3509/3511/3513/3566/3567/3568/5139)