TIBCO BusinessConnect and POODLE Vulnerability
Article ID: KB0108126
Updated On:
| Products | Versions |
|---|---|
| TIBCO BusinessConnect | - |
| Not Applicable | - |
Description
Description:
TIBCO BusinessConnect has a number of security transports that utilize secure protocols such as SSL. The following is a list of the protocols and their SSL and TLS usage.
HTTP/S: BC 6.2.0 introduced TLS support for inbound HTTP/S connections, and it can be set to not fall back to SSLv3. See the BC 6.2 release notes for details. BC 6.1 Hotfix 7 includes a new switch to enable SSLv3 to be disabled for HTTP/S inbound connections. Please see the hotfix readme for details.
With all BC 6.X implementations, SSL can be disabled for outbound HTTP/S connections at the trading partner level such that only TLS is used. See the documentation for configuration details.
EMAIL: BC 6.2.0 uses SSL and TLS for outbound secure connections. Inbound POP3 emails can only use the SSL protocol. BC 6.1.X and lower versions do not support SSL with the EMAIL transport.
FTP/S: BC 6.X.X only support TLS or SSL for outbound FTP/S connections. The BC 6.X.X FTP Server Plugin only supports SSL protocol for inbound FTP/S connections.
Environment
all platforms
Issue/Introduction
TIBCO BusinessConnect and POODLE Vulnerability
Additional Information
BusinessConnect 6.2.0 Release notes
Feedback
Yes
No
Powered by
