Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Rational Asset Manager (CVE-2016-5983)

Summary IBM WebSphere Application Server is shipped as a component of IBM Rational Asset Manager. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletin listed in the...

Security Bulletin: Vulnerability in Rational DOORS Next Generation with potential for Cross-Site Scripting attack (CVE-2016-5955)

Summary Security Bulletin: Vulnerability in Rational DOORS Next Generation with potential for Cross-Site Scripting attack. Vulnerability Details CVE ID: CVE-2016-5955 DESCRIPTION: IBM DOORS Next Generation DNG/RRC is vulnerable to an undisclosed cross-site scripting attack. This vulnerability...

Security Bulletin: Rational Directory Administrator is affected by an Apache Tomcat vulnerability (CVE-2016-3092)

Summary Rational Directory Administrator, which is installed with Rational Directory Server Tivoli 5.2.1 iFix 9 and earlier, is affected by an Apache Tomcat security vulnerability CVE-2016-3092. Install a new interim fix of Rational Directory Server to resolve this issue. Vulnerability Details...

Security Bulletin: Command Injection Vulnerability in IBM® Rational® Quality Manager (CVE-2016-0326)

Summary IBM® Rational® Quality Manager could allow an authenticated attacker to inject commands through a specially crafted HTML request that would be executed by the operating system with user privileges. Vulnerability Details CVEID: CVE-2016-0326 DESCRIPTION: IBM Rational Quality Manager could...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Rational Directory Server (Tivoli) and Rational Directory Administrator

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 6 and Version 7 that are used by IBM Rational Directory Server Tivoli and IBM Rational Directory Administrator. These issues were disclosed as part of the IBM Java SDK updates in July 2016. Ne...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with Rational Asset Manager (CVE-2016-0377)

Summary WebSphere Application Server is shipped as a component of Rational Asset Manager. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin:...

Security Bulletin: Multiple Vulnerabilities in Oracle Outside In Technology affect IBM Rational DOORS Next Generation (CVE-2016-3574, CVE-2016-3575, etc)

Summary IBM Rational DOORS Next Generation® is affected by multiple vulnerabilities in the Oracle Outside In Technology® that is used as a component. Vulnerability Details CVEID: CVE-2016-3574 DESCRIPTION: An unspecified vulnerability in Oracle Fusion Middleware related to the Outside In Technolo...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Rational Performance Tester (CVE-2016-3426)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 and Version 8. These issues were disclosed as part of the IBM Java SDK updates in April 2016. Rational Performance Tester is only affected by one of these vulnerabilities. Vulnerability Details CVEID:...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Rational Service Tester (CVE-2016-3426)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 and Version 8. These issues were disclosed as part of the IBM Java SDK updates in April 2016. Rational Service Tester is only affected by one of these vulnerabilities. Vulnerability Details CVEID:...

Security Bulletin: Vulnerabilities affect Document Builder component in IBM Rational Publishing Engine (CVE-2016-2912, CVE-2016-2914)

Summary Vulnerabilities in the IBM Rational Publishing Engine affects the Document Builder RPENG. Vulnerability Details CVEID: CVE-2016-2912 DESCRIPTION: IBM Rational Publishing Engine is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker...

Security Bulletin: Vulnerabilities in OpenSSL affect Rational BuildForge (CVE-2016-2107, CVE-2016-2176)

Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by Rational BuildForge. Rational BuildForge has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2107 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive...

Security Bulletin: Vulnerability in Rational License Key Server (CVE-2015-8277)

Summary A possible security vulnerability has been reported in IBM Rational License Key Server RLKS. Vulnerability Details CVEID: CVE-2015-8277 DESCRIPTION: Flexera Software FlexNet Publisher is vulnerable to a buffer overflow, caused by improper bounds checking by lmgrd. By sending an overly lon...

Security Bulletin: A security vulnerability has been identified in Jazz Reporting Service shipped with Rational Insight (CVE-2016-3092)

Summary Jazz Reporting Service is shipped as a component of Rational Insight. Information about a security vulnerability affecting Jazz Reporting Service has been published in a security bulletin. Vulnerability Details Consult the security bulletin Security Bulletin: A security vulnerability has...

Security Bulletin: A security vulnerability has been identified in Jazz Reporting Service shipped with Rational Reporting for Development Intelligence (CVE-2016-3092)

Summary Jazz Reporting Service is shipped as a component of Rational Reporting for Development Intelligence RRDI. Information about a security vulnerability affecting Jazz Reporting Service has been published in a security bulletin. Vulnerability Details Consult the security bulletin Security...

Security Bulletin: A security vulnerability has been identified in Jazz Team Server shipped with Jazz Reporting Service (CVE-2016-3092)

Summary Jazz Team Server is shipped as a component of Jazz Reporting Service JRS. Information about a security vulnerability affecting Jazz Team Server and Jazz-based products has been published in a security bulletin. Vulnerability Details Consult the security bulletin Security Bulletin: Securit...

Security Bulletin: Buffer overflow in V8

Summary Under certain conditions, V8 may improperly expand memory allocations in the Zone::New function. This could potentially be used to cause a Denial of Service via buffer overflow or as a trigger for a remote code execution. Vulnerability Details CVEID: CVE-2016-1669 DESCRIPTION: Google Chro...

Security Bulletin: Multiple Vulnerabilities in OpenSSL affect Rational Insight

Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by Rational Insight. Rational Insight has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2108 DESCRIPTION: OpenSSL could allow a remote attacker to execute arbitrary code on...

Security Bulletin: A vulnerability in Apache Tomcat affects Rational Insight (CVE-2015-5174)

Summary The Rational Insight is shipped with a version of the Apache Tomcat web server which contains a security vulnerability that could have a potential security impact. Vulnerability Details CVEID: CVE-2015-5174 DESCRIPTION: Apache Tomcat could allow a remote attacker to traverse directories o...

Security Bulletin: A vulnerability in Apache Tomcat affects Rational Reporting for Development Intelligence (CVE-2015-5174)

Summary The Rational Reporting for Development Intelligence RRDI is shipped with a version of the Apache Tomcat web server which contains a security vulnerability that could have a potential security impact. Vulnerability Details CVEID: CVE-2015-5174 DESCRIPTION: Apache Tomcat could allow a remot...

Security Bulletin: Vulnerabilities in OpenSSL affect Rational Tau (CVE-2016-2107, CVE-2016-2176)

Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by Rational Tau. Rational Tau has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2107 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information,...