Security Bulletin: Vulnerability in Spring Framework for Java Deserialization in Rational Test Control Panel in Rational Test Workbench and Rational Test Virtualization Server (CVE-2015-7450)

Summary A Spring Framework vulnerability for handling Java object deserialization was addressed by Rational Test Control Panel in Rational Test Workbench and Rational Test Virtualization Server. This vulnerability does not have its own CVE number, but is linked to CVE-2015-7450. Vulnerability...

Security Bulletin: Vulnerability in Apache Commons affects RIT and RTCP in Rational Test Workbench, RTCP and RIT Agent in Rational Test Virtualization Server, and RIT Agent in Rational Performance Test Server (CVE-2015-7450)

Summary An Apache Commons Collections vulnerability for handling Java object deserialization was addressed by Rational Integration Tester in Rational Test Workbench, Rational Test Control Panel in Rational Test Workbench and Rational Test Virtualization Server, and RIT Agent in Rational Test...

Security Bulletin: Vulnerability in OpenSSL affects Rational Tau (CVE-2015-1793)

Summary OpenSSL vulnerabilities were disclosed by the OpenSSL Project and affect Rational Tau. This includes the alternate chains certificate forgery vulnerability CVE-2015-1793. Rational Tau has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-1793 DESCRIPTION: OpenSSL could...

Security Bulletin: Vulnerabilities in OpenSSL including Logjam affect Rational Insight (CVE-2015-4000, CVE-2015-1789, CVE-2015-1790, CVE-2015-1792)

Summary OpenSSL vulnerabilities were disclosed on June 11, 2015 by the OpenSSL Project. This includes Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol CVE-2015-4000. OpenSSL is used by Rational Insight. Rational Insight has addressed the applicable CVEs...

Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects Rational Tau (CVE-2015-4000)

Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affects Rational Tau Vulnerability Details CVEID: CVE-2015-4000 DESCRIPTION: The TLS protocol could allow a remote attacker to obtain sensitive information, caused by the failure to properly convey a...

Security Bulletin: Vulnerability in Diffie-Hellman cipher affects Rational Insight (CVE-2015-4000)

Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affects Jazz Team Server and Cognos Business Intelligence Cognos BI shipped with Rational Insight. Vulnerability Details CVEID: CVE-2015-4000 DESCRIPTION: The TLS protocol could allow a remote attacker ...

Security Bulletin: Vulnerabilities in OpenSSL affect Rational Insight (CVE-2015-0286, CVE-2015-0287, CVE-2015-0288, CVE-2015-0289, CVE-2015-0293)

Summary OpenSSL vulnerabilities were disclosed on March 19, 2015 by the OpenSSL Project. OpenSSL is used by Rational Insight. Rational Insight has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-0286 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an erro...

Security Bulletin: Vulnerabilities in OpenSSL affect Rational Reporting for Development Intelligence (CVE-2015-0286, CVE-2015-0287, CVE-2015-0288, CVE-2015-0289, CVE-2015-0293)

Summary OpenSSL vulnerabilities were disclosed on March 19, 2015 by the OpenSSL Project. OpenSSL is used by Rational Reporting for Development Intelligence RRDI. RRDI has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-0286 DESCRIPTION: OpenSSL is vulnerable to a denial of...

Security Bulletin: Vulnerability in SSLv3 affects Rational Insight (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in Rational Insight. Vulnerability Details CVE-ID: CVE-2014-3566 Description: Product could allow a remote attacker to obtain sensitive informatio...

Security Bulletin: Critical Security Vulnerability in RDS Client library affecting Rational Change (CVE-2014-3089)

Summary Clear text password in IBM Rational Directory Server RDS supplied Client library could allow potential hacker to gain access to RDS and access to unauthorized data used by consuming products such as Rational Change. Vulnerability Details | Subscribe to My Notifications to be notified of...

Security Bulletin: Rational Systems Tester is affected by Libxml2 vulnerability (CVE-2014-0191)

Summary Denial-Of-service vulnerability has been discovered in Libxml2 that was reported on May 09, 2014 Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your IBM ID ---|--...

Security Bulletin: Classloader Manipulation Vulnerability in Rational Change (CVE-2014-0114)

Summary There is a classloader manipulation vulnerability in Apache Struts 1 that is used by the IBM Rational Change application. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires logi...

Security Bulletin: Rational Tau is affected by OpenSSL vulnerabilities (CVE-2014-0224)

Summary Security vulnerabilities have been discovered in OpenSSL that were reported on June 5, 2014 by the OpenSSL Project. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with...

Security Bulletin: Rational ClearQuest affected by vulnerability in OpenSSL (CVE-2014-0076)

Summary A security vulnerability has been discovered in OpenSSL. Some configurations of IBM rational ClearQuest may expose this vulnerability. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information...

Security Bulletin: Rational ClearQuest affected by vulnerability in OpenSSL (CVE-2014-0160)

Summary A security vulnerability has been discovered in OpenSSL. OpenSSL is shipped as embedded in cqperl, in some cases IBM Rational ClearQuest hooks/scripts using OpenSSL might be affected. The vulnerability could allow a malicious server to expose private memory of the client. ClearQuest has n...

Security Bulletin: Rational Directory Server can be affected by a vulnerability in the IBM JRE (CVE-2014-0411)

Summary A vulnerability affecting both Tivoli and Apache versions of IBM Rational Directory Server RDS and Rational Directory Administrator has been identified in relation to the JSSE component. The vulnerability may have partial confidentiality and integrity impacts. Vulnerability Details |...

Security Bulletin: Rational Insight - Oracle CPU October 2013 (CVE-2013-5802, CVE-2013-5825)

Summary Multiple security vulnerabilities exist in the IBM JRE that is shipped with Rational Insight. The same security vulnerabilities also exist in the IBM Java SDK that is shipped with the IBM WebSphere Application Server WAS. Vulnerability Details | Subscribe to My Notifications to be notifie...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Federated Identity Manager and IBM Tivoli Federated Identity Manager Business Gateway

Summary IBM SDK Java Technology Edition is shipped as a component of IBM Tivoli Federated Identity Manager and IBM Tivoli Federated Identity Manager Business Gateway. Information about multiple security vulnerabilities affecting IBM SDK, Java Technology Edition has been published in a security...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Federated Identity Manager and IBM Tivoli Federated Identity Manager Business Gateway

Summary IBM SDK Java Technology Edition is shipped as a component of IBM Tivoli Federated Identity Manager and IBM Tivoli Federated Identity Manager Business Gateway. Information about multiple security vulnerabilities affecting IBM SDK, Java Technology Edition has been published in a security...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Federated Identity Manager and IBM Tivoli Federated Identity Manager Business Gateway

Summary IBM SDK, Java Technology Edition is shipped as a component of IBM Tivoli Federated Identity Manager and IBM Tivoli Federated Identity Manager Business Gateway. Information about multiple security vulnerabilities affecting IBM SDK, Java Technology Edition has been published in a security...