IBM Rational License Key Server Administration and Reporting Tool 8.1.4.x < 8.1.4.4 Multiple Vulnerabilities

The remote host is running a version 8.1.4.x of IBM Rational License Key Server Administration and Reporting Tool RLKS that is prior to 8.1.4.4. It is, therefore, affected by multiple vulnerabilities : - The secure flag for session cookies is not properly set when in SSL mode. An attacker can...

CVE-2014-0909

The IBM Rational License Key Server (RLKS) Administration and Reporting Tool, versions 8.1.4.x prior to 8.1.4.4, is affected by CVE-2014-0909 due to not setting the secure flag on the session cookie in SSL mode. This allows an attacker to potentially capture the cookie by intercepting traffic in ...