IBM87B328FA905BCD999C71F41FAAF65C76C216A9481AF9F3BE71FEB84E57D503F1Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect Rational Functional Tester
0.001 Low
EPSS
Percentile
22.1%
Summary
There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.8 and IBM® Runtime Environment Java™ Version 1.8 used by Rational Functional Tester. Rational Functional Tester has addressed the applicable CVEs.
Vulnerability Details
CVEID:CVE-2023-22045
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the VM component could allow a remote attacker to cause low confidentiality impacts.
CVSS Base score: 3.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/261047 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)
CVEID:CVE-2023-22049
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the Libraries component could allow a remote attacker to cause low integrity impacts.
CVSS Base score: 3.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/261048 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| RFT | 9.2 |
| RFT | 9.5 |
Remediation/Fixes
| Product | Version | APAR | Remediation/ Fix |
|---|---|---|---|
| RFT | 9.2 - 9.5 | None | Download IBM SDK, Java Technology Edition, Version 8R0 Service Refresh 8 Fix Pack 5 from the Fix Central and apply it. https://www.ibm.com/support/fixcentral/swg/downloadFixes?parent=ibm%7ERational&product=ibm/Rational/Rational+Functional+Tester&platform=All&function=fixId&fixids=Rational-RFT-JavaPatch-Java8SR8FP10&includeRequisites=1&includeSupersedes=0&downloadMethod=http |
Workarounds and Mitigations
None
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm rational functional tester | eq | 9.2 | |
| ibm rational functional tester | eq | 9.5 |
Related
0.001 Low
EPSS
Percentile
22.1%