Security Bulletin: Java Vulnerability in Rational Automation Framework (CVE-2013-4002, CVE-2013-5825, CVE-2013-5372)

Summary Previous releases of IBM Rational Automation Framework are affected by the vulnerabilities in Java that may allow remote attackers to influence the availability of the Framework Server. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alert...

Security Bulletin: Java Vulnerability in Rational Automation Framework (CVE-2013-0169)

Summary Previous releases of IBM Rational Automation Framework are affected by a vulnerability in Java that may allow remote attackers to execute plaintext-recovery attacks. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow...

Security Bulletin: Java Vulnerability in Rational Automation Framework (CVE-2013-0440)

Summary Previous releases of IBM Rational Automation Framework are affected by a vulnerability in Java that may allow remote attackers to influence the availability of the Framework Server. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts li...

CVE-2012-4816

IBM Rational Automation Framework RAF 3.x through 3.0.0.5 allows remote attackers to bypass intended Env Gen Wizard aka Environment Generation Wizard access restrictions by visiting context roots in HTTP sessions on port 8080...

Design/Logic Flaw

IBM Rational Automation Framework RAF 3.x through 3.0.0.5 allows remote attackers to bypass intended Env Gen Wizard aka Environment Generation Wizard access restrictions by visiting context roots in HTTP sessions on port 8080...

CVE-2012-4816

CVE-2012-4816 affects IBM Rational Automation Framework (RAF) 3.0 and later. An attacker can bypass the Environment Wizard access controls by visiting context roots via the RAF web UI on port 8080, bypassing the intended restrictions. The IBM Security Bulletin (E103076C...) confirms the vulnerabi...

CVE-2012-4816

IBM Rational Automation Framework RAF 3.x through 3.0.0.5 allows remote attackers to bypass intended Env Gen Wizard aka Environment Generation Wizard access restrictions by visiting context roots in HTTP sessions on port 8080...