IBM Support

Configuring IBM Websphere DataPower appliance to close CVE-2011-3389 (BEAST) SSL/TLS vulnerability

Troubleshooting


Problem

A known SSL/TLS vulnerability, CVE-2011-3389 (also known as BEAST), exists in the SSLv3 and TLS 1.0 protocols. To eliminate this vulnerability, please review the specific configuration recommendations below.

Symptom

Refer to CVE-2011-3389

[{"Product":{"code":"SS9H2Y","label":"IBM DataPower Gateway"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Component":"General","Platform":[{"code":"PF009","label":"Firmware"}],"Version":"6.0.0;6.0.1;7.0.0;7.1;7.2;6.0.2","Edition":"Edition Independent","Line of Business":{"code":"LOB77","label":"Automation Platform"}},{"Product":{"code":"SSQ3J2","label":"WebSphere DataPower B2B Appliance XB60"},"Business Unit":{"code":"BU053","label":"Cloud \u0026 Data Platform"},"Component":" ","Platform":[{"code":"","label":""}],"Version":"4.0.2;4.0.1;3.8.2;5.0.0;6.0.0","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}},{"Product":{"code":"SSHTED","label":"WebSphere DataPower B2B Appliance XB62"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":" ","Platform":[{"code":"","label":""}],"Version":"4.0.2;4.0.1;5.0.0;6.0.0","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}},{"Product":{"code":"SS6L4E","label":"WebSphere DataPower Integration Appliance XI50"},"Business Unit":{"code":"BU053","label":"Cloud \u0026 Data Platform"},"Component":" ","Platform":[{"code":"","label":""}],"Version":"4.0.2;4.0.1;3.8.2;5.0.0;6.0.0","Edition":"","Line of Business":{"code":"","label":""}},{"Product":{"code":"SSHT9H","label":"WebSphere DataPower Integration Appliance XI52"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":" ","Platform":[{"code":"","label":""}],"Version":"4.0.2;4.0.1;5.0.0;6.0.0","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}},{"Product":{"code":"SSNM8H","label":"WebSphere DataPower Integration Appliance XI52 Virtual Edition"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":" ","Platform":[{"code":"","label":""}],"Version":"5.0.0;6.0.0","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}},{"Product":{"code":"SSFGB5","label":"WebSphere DataPower Integration Blade XI50B"},"Business Unit":{"code":"BU053","label":"Cloud \u0026 Data Platform"},"Component":" ","Platform":[{"code":"","label":""}],"Version":"4.0.2;4.0.1;3.8.2;5.0.0;6.0.0","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}},{"Product":{"code":"SSNHP3","label":"WebSphere DataPower Low Latency Appliance XM70"},"Business Unit":{"code":"BU053","label":"Cloud \u0026 Data Platform"},"Component":" ","Platform":[{"code":"","label":""}],"Version":"3.8.2;4.0.1;4.0.2;5.0.0;6.0.0","Edition":"","Line of Business":{"code":"","label":""}},{"Product":{"code":"SSNR47","label":"WebSphere DataPower Service Gateway XG45"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":" ","Platform":[{"code":"","label":""}],"Version":"4.0.2;5.0.0;6.0.0","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}},{"Product":{"code":"SS6L6N","label":"WebSphere DataPower XML Accelerator XA35"},"Business Unit":{"code":"BU053","label":"Cloud \u0026 Data Platform"},"Component":" ","Platform":[{"code":"","label":""}],"Version":"4.0.2;4.0.1;3.8.2;5.0.0","Edition":"","Line of Business":{"code":"","label":""}},{"Product":{"code":"SS6L5J","label":"WebSphere DataPower XML Security Gateway XS40"},"Business Unit":{"code":"BU053","label":"Cloud \u0026 Data Platform"},"Component":" ","Platform":[{"code":"","label":""}],"Version":"4.0.2;4.0.1;3.8.2;5.0.0;6.0.0","Edition":"","Line of Business":{"code":"","label":""}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
11 June 2026

UID

swg21578730