Security Bulletin: Vulnerability in SSLv3 affects Rational Change (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in Rational Change. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow thi...

Security Bulletin: Rational Test Control Panel component in Rational Test Workbench and Rational Test Virtualization Server affected by Apache Tomcat vulnerablity (CVE-2013-4444)

Summary Apache Tomcat is vulnerable affecting the Rational Test Control Panel component in IBM Rational Test Workbench and Rational Test Virtualization Server. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for...

Security Bulletin: Rational Insight - IBM SDK, Java Technology Edition Quarterly CPU - April 2014 (CVE-2014-0460, CVE-2014-0878)

Summary Multiple security vulnerabilities exist in the IBM JRE that is shipped with Rational Insight. Vulnerability Details Security vulnerabilities have been discovered and reported in IBM SDK, Java Technology Edition Quarterly CPU - April 2014 update. CVE ID: CVE-2014-0460 Description: An...

Security Bulletin: Security vulnerability in Jazz Team Server affects Rational Insight (CVE-2014-3092)

Summary A vulnerability in the Jazz Team Server affects the Rational Insight, in the areas of Data Collection Component and Jazz Reporting Service. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Rational Performance Tester (CVE-2014-4244, CVE-2014-4263)

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition, Version 7 that is used by Rational Performance Tester and were disclosed as part of the IBM Java SDK updates in July 2014. Vulnerability Details | Subscribe to My Notifications to be notified of important product suppo...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Rational Service Tester (CVE-2014-4244, CVE-2014-4263)

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition, Version 7 that is used by Rational Service Tester and were disclosed as part of the IBM Java SDK updates in July 2014. Vulnerability Details | Subscribe to My Notifications to be notified of important product support...

Security Bulletin: Rational Directory Server and Rational Directory Administrator can be affected by vulnerabilities (CVE-2014-4263, CVE-2014-0075, CVE-2014-0096, CVE-2014-0099 and CVE-2014-0119)

Summary This security bulletin is a notice of security vulnerabilities in IBM Runtime Environment, Java Technology Edition and Apache Tomcat server which impacts IBM Rational Directory Server 5.2.x, 5.1.1.x and Rational Directory Administrator 6.x. Vulnerability Details | Subscribe to My...

Security Bulletin: Login Error Messages Credential Enumeration in ClearQuest Web (CVE-2014-3105)

Summary IBM Rational ClearQuest Web for OSLC integration is vulnerable to Login Error Messages Credential Enumeration. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your...

Security Bulletin: "Local Access Only" authentication type does not prevent unauthenticated remote access to Help Server Administration in ClearQuest (CVE-2014-3106)

Summary "Local Access Only" authentication type does not prevent unauthenticated remote access to Help Server Administration. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login wi...

Security Bulletin: XML entity expansion vulnerabilities in Rational ClearQuest (CVE-2014-3104)

Summary IBM Rational ClearQuest is vulnerable to XML entity expansion attacks. These attacks could cause a denial of service. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login wi...

Security Bulletin: Rational Insight - Open Source Tomcat reported in May 2014 X-Force Report

Summary Multiple security vulnerabilities exist in the Tomcat that is shipped with the Rational Insight. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your IBM ID ---|--...

Security Bulletin: Vulnerability in Rational Engineering Lifecycle Manager, Rational Software Architect Design Manager and Rhapsody Design Manager (CVE-2014-3037)

Summary IBM Rational Engineering Lifecycle Manager, Rational Software Architect Design Manager and Rational Rhapsody Design Manager are vulnerable to a cross-site request forgery attack. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like...

Security Bulletin: Critical Security Vulnerability in Rational Directory Server (Tivoli and Apache) (CVE-2014-3089)

Summary A security vulnerability impacts IBM Rational Directory Server RDS 5.2.x, 5.1.1.x and Rational Directory Administrator RDA 6.x Java Client library. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more...

Security Bulletin: Rational License Key Server Administration and Reporting Tool vulnerability (CVE-2014-0909, CVE-2014-3079 and CVE-2014-4756)

Summary Three possible security vulnerabilities have been reported in Rational License Key Server Administration and Reporting Tool. There have been no reported exploits of these vulnerabilities. Vulnerability Details | Subscribe to My Notifications to be notified of important product support...

Security Bulletin: Critical Security Vulnerability in RDS Client library affecting Rational Change (CVE-2014-3089)

Summary Clear text password in IBM Rational Directory Server RDS supplied Client library could allow potential hacker to gain access to RDS and access to unauthorized data used by consuming products such as Rational Change. Vulnerability Details | Subscribe to My Notifications to be notified of...

Security Bulletin: Rational Build Forge Security Advisory (CVE-2014-0075, CVE-2014-0099)

Summary Apache Tomcat has security vulnerabilities that can lead to a denial of service DOS attack or obtain sensitive information. To avoid this issue in IBM Rational Build Forge, you should use the latest version Apache Tomcat Server which contains the fix for these problems Vulnerability Detai...

Security Bulletin: Rational Test Control Panel in Rational Test Workbench and Rational Test Virtualization Server affected by Apache Tomcat vulnerablity (CVE-2014-0075, CVE-2014-0096, CVE-2014-0099, CVE-2014-0119)

Summary Apache Tomcat is vulnerable to a number of security issues affecting the Rational Test Control Panel component in IBM Rational Test Workbench and Rational Test Virtualization Server. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts...

Security Bulletin: Rational Insight - Oracle CPU January 2014 (CVE-2014-0416, CVE-2014-0423)

Summary Multiple security vulnerabilities exist in the IBM JRE that is shipped with Rational Insight. The same security vulnerabilities also exist in the IBM Java SDK that is shipped with the IBM WebSphere Application Server WAS. Vulnerability Details | Subscribe to My Notifications to be notifie...

Security Bulletin: Rational Systems Tester is affected by Libxml2 vulnerability (CVE-2014-0191)

Summary Denial-Of-service vulnerability has been discovered in Libxml2 that was reported on May 09, 2014 Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your IBM ID ---|--...

Security Bulletin: Open Source Apache HTTP vulnerabilities (CVE-2014-0098) for RAF

Summary Previous releases of IBM Rational Automation Framework RAF are affected by the vulnerabilitie in Apache HTTP Server that may allow remote attackers to influence the availability of the Framework Server. Vulnerability Details | Subscribe to My Notifications to be notified of important...