Customer Information Regarding the 'OprahSSL' (OpenSSL) Security Flaw
Recently, an OpenSSL security flaw was discovered. An attacker could cause certain checks on untrusted certificates to be bypassed, such as the CA flag, enabling them to use valid leaf certificate to act as a CA and “issue” an invalid certificate. The official designation of dubbed 'OprahSSL' is CVE-2015-1793. This issue will impact any application that verifies certificates including SSL/TLS/DTLS clients and SSL/TLS/DTLS servers using client authentication.
The versions affected by the 'OprahSSL' bug, 1.0.2c, 1.0.2b, 1.0.1n and 1.0.1o, are not used by Beta Systems.
After the announcement of the 'OprahSSL Security Bug' Beta Systems has immediately checked all Data Center and Identity Access Management products. It has been found out that no application is affected. The versions affected by the 'OprahSSL' bug, 1.0.2c, 1.0.2b, 1.0.1n and 1.0.1o, are not used by Beta Systems.
OpenSSL is not used on any of the websites of Beta Systems Software Group.