Lucene search

K
ibmIBM901986F3574AAF8B9243FC01A9CD48E2FFE3FDD7022BBFF4780FA438EA048CF1
HistoryDec 16, 2020 - 7:59 p.m.

Security Bulletin: Vulnerability in IBM Java SDK and IBM Java Runtime affects Rational Performance Tester

2020-12-1619:59:25
www.ibm.com
5

0.001 Low

EPSS

Percentile

28.5%

Summary

There is a vulnerability in IBM® SDK Java™ Technology Edition, Version 1.8 and IBM® Runtime Environment Java™ Version 1.8 used by Rational Performance Tester. Rational Performance Tester has addressed the applicable CVE.

Vulnerability Details

CVEID:CVE-2020-2590
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the Java SE Security component could allow an unauthenticated attacker to cause no confidentiality impact, low integrity impact, and no availability impact.
CVSS Base score: 3.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/174538 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
RPT 9.5

Remediation/Fixes

Upgrading to version 10.1.2 is recommended.

Product VRMF APAR Remediation/First Fix
RPT 9.5 None http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FRational%2FRational+Performance+Tester&fixids=Rational-RPT-JavaPatch-Java8SR6FP20&source=SAR

Workarounds and Mitigations

None

CPENameOperatorVersion
ibm rational performance testereq9.5