Security Bulletin: Vulnerabilities in FasterXML affects IBM Common Licensing's Administration And Reporting Tool (ART) and its Agent (217968, CVE-2020-36518)

Summary Security Vulnerablities have been addressed in IBM Common Licensing. Faster-XML Jackson is a JSON to Java object conversion API 217968, CVE-2020-36518. A fix is available to address the vulnerability. Vulnerability Details CVEID:CVE-2020-36518 DESCRIPTION: FasterXML jackson-databind is...

Security Bulletin: A Vulnerability in Spring Framework affects IBM License Key Server Administration and Reporting Tool

Summary A File Download related Vulnerability has been discovered in Spring Framework which is used by the IBM License Key Server Administration and Reporting Tool. A mitigation has been identified and released via a new version of IBM License Key Server Administration and Reporting Tool...

Security Bulletin: Security vulnerabilities in IBM Java Runtime affect IBM License Key Server Administration and Reporting Tool and Agent

Summary There are multiple vulnerabilities related to IBM® Runtime Environment Java™ Technology Edition which is used and shipped by different versions of IBM License Key Server Administration and Reporting Tool ART and Agent. Vulnerability Details CVEID: CVE-2019-2933 DESCRIPTION: An unspecified...

Security Bulletin: Security Vulnerability in WebSphere Application Server Liberty Profile affects IBM License Key Server Administration and Reporting Tool and Agent (CVE-2018-1901)

Summary A vulnerability in WebSphere Application Server Liberty Profile which is used and shipped by different versions of IBM License Key Server Administration and Reporting Tool ART and Agent has been published. Vulnerability Details CVEID: CVE-2018-1901 DESCRIPTION: IBM WebSphere Application...

Security Bulletin: Rational License Key Server Administration and Reporting Tool vulnerabilities (CVE-2014-3566, CVE-2014-4244)

Summary Two possible security vulnerabilities have been reported in RLKS Administration and Reporting Tool. There have been no reported exploits of these vulnerabilities. Vulnerability Details CVE ID: CVE-2014-3566 Description: Product could allow a remote attacker to obtain sensitive information...

CVE-2015-5045

CVE-2015-5045 affects IBM RLKS Administration and Reporting Tool. The vulnerability allows a local attacker to obtain sensitive information from RLKS before version 8.1.4.9 iFix 04 due to an unspecified issue in the Administration and Reporting Tool. Affected versions include 8.1.4 and 8.1.4.x up...

Code injection

The Administration and Reporting Tool in IBM Rational License Key Server RLKS 8.1.4 before 8.1.4.7 allows remote authenticated users to read cookies via unspecified vectors...

CVE-2014-0909

The Administration and Reporting Tool in IBM Rational License Key Server RLKS 8.1.4.x before 8.1.4.4 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...