Security Bulletin: Rational RequisitePro affected by vulnerability in OpenSSL (CVE-2014-0076)

Summary A security vulnerability has been discovered in OpenSSL. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your IBM ID ---|--- CVE-ID: CVE-2014-0076 Description:...

Security Bulletin: Rational ClearQuest affected by vulnerability in OpenSSL (CVE-2014-0076)

Summary A security vulnerability has been discovered in OpenSSL. Some configurations of IBM rational ClearQuest may expose this vulnerability. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information...

Security Bulletin: Rational Service Tester vulnerabilities due to security vulnerabilities in IBM JRE 1.5, 1.6 and 1.7 (CVE-2014-0411, CVE-2014-0453)

Summary A potential security vulnerability exists in the IBM Java Runtime Environment component of IBM Rational Service Tester related to the use of SSL/TLS. Patches for these vulnerabilities are available in IBM JRE 7 iFixes provided with IBM Rational Service Tester version 8.6. Vulnerability...

Security Bulletin: Rational Performance Tester vulnerabilities due to security vulnerabilities in IBM JRE 1.5, 1.6 and 1.7 (CVE-2014-0411, CVE-2014-0453)

Summary A potential security vulnerability exists in the IBM Java Runtime Environment component of IBM Rational Performance Tester related to the use of SSL/TLS. Patches for these vulnerabilities are available in IBM JRE 7 iFixes provided with IBM Rational Performance Tester version 8.6...

Security Bulletin: Rational Build Forge is affected by vulnerabilities in OpenSSL (CVE-2014-0160 and CVE-2014-0076)

Summary Security vulnerabilities have been discovered in OpenSSL. These vulnerabilities affect IBM Rational Build Forge 8.0 and 8.0.0.1. Fixes for the vulnerabilities have been added to the Rational Build Forge 8.0.0.1 iFix1 release. If https and SSL are not enabled, Build Forge 8.0 and 8.0.0.1 a...

Security Bulletin: XML External Entity (XXE) vulnerabilities in ClearQuest (CVE-2014-0950)

Summary IBM Rational ClearQuese is vulnerable to XML external entity attacks. These attacks could cause denial of service or be used to attack other servers accessible from a client or server. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts...

Security Bulletin: Rational Build Forge Security Advisory (CVE-2014-0098)

Summary Apache HTTP Server has a security vulnerability that can lead to a denial of service DOS attack. To avoid this issue in IBM Rational Build Forge, you should use the latest version Apache HTTP Server which contains the fix for this problem. Vulnerability Details | Subscribe to My...

Security Bulletin: Rational Build Forge Security Advisory (CVE-2013-4286)

Summary IBM Rational Build Forge is shipped with an Apache Tomcat. Apache Tomcat has released a patch that contains security vulnerability fixes and BuildForge is affected. These fixes have been added to the Rational Build Forge 7.1.3.5 iFix2 and 8.0.0.2 release. Vulnerability Details | Subscribe...

Security Bulletin: Rational Test Control Panel in Rational Test Workbench and Rational Test Virtualization Server affected by Apache Tomcat vulnerablity (CVE-2013-4286, CVE-2013-4322, CVE-2013-4590)

Summary Apache Tomcat is vulnerable affecting the Rational Test Control Panel in IBM Rational Test Workbench and Rational Test Virtualization Server. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more...

Security Bulletin: Vulnerabilities in ClearQuest GSKit Component (CVE-2013-6747)

Summary IBM Rational ClearQuest is vulnerable to a denial of service caused by an error in the Global Security Toolkit GSKit component. By initiating an SSL/TLS connection using a malformed certificate chain, a server process could hang or crash. Vulnerability Details | Subscribe to My...

Security Bulletin: Rational ClearQuest affected by vulnerability in OpenSSL (CVE-2014-0160)

Summary A security vulnerability has been discovered in OpenSSL. OpenSSL is shipped as embedded in cqperl, in some cases IBM Rational ClearQuest hooks/scripts using OpenSSL might be affected. The vulnerability could allow a malicious server to expose private memory of the client. ClearQuest has n...

Security Bulletin: Rational Directory Server can be affected by a vulnerability in the IBM JRE (CVE-2014-0411)

Summary A vulnerability affecting both Tivoli and Apache versions of IBM Rational Directory Server RDS and Rational Directory Administrator has been identified in relation to the JSSE component. The vulnerability may have partial confidentiality and integrity impacts. Vulnerability Details |...

Security Bulletin: Vulnerability in IBM Rational RequisitePro could allow a remote attacker to obtain sensitive information. (CVE-2013-5780)

Summary Security vulnerability exists in IBM 32-bit Runtime Environment for Windows Java Technology Edition Version 6 that could allow a remote attacker to obtain sensitive information. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like...

Security Bulletin: Vulnerability in Rational Software Architect Design Manager and Rhapsody Design Manager (CVE-2013-5459)

Summary An unspecified vulnerability within IBM Rational Software Architect RSA Design Manager and Rational Rhapsody Design Manager may affect data integrity. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for...

Security Bulletin: Rational Insight - Oracle CPU October 2013 (CVE-2013-5802, CVE-2013-5825)

Summary Multiple security vulnerabilities exist in the IBM JRE that is shipped with Rational Insight. The same security vulnerabilities also exist in the IBM Java SDK that is shipped with the IBM WebSphere Application Server WAS. Vulnerability Details | Subscribe to My Notifications to be notifie...

Security Bulletin: Java Vulnerability in Rational Automation Framework (CVE-2013-4002, CVE-2013-5825, CVE-2013-5372)

Summary Previous releases of IBM Rational Automation Framework are affected by the vulnerabilities in Java that may allow remote attackers to influence the availability of the Framework Server. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alert...

Security Bulletin: Rational Performance Tester Open Source OpenSAML XML Information Disclosure (CVE-2013-6440)

Summary A potential security vulnerability exists in IBM Rational Performance Tester related to OpenSAML. OpenSAML could allow a remote authenticated attacker to obtain sensitive information, caused by an error when parsing XML entities. By persuading a victim to open a specially-crafted XML...

Security Bulletin: Multiple Vulnerabilities in current IBM SDK for Java for IBM Rational ClearQuest Web Client (CVE-2013-5802 and CVE-2013-5825)

Summary IBM Rational ClearQuest Web server is sensitive to vulnerabilities in the IBM JRE supplied with IBM WebSphere Application Server. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information...

Security Bulletin: Vulnerability in IBM Rational ClearQuest Web Client with potential for Information Disclosure (CVE-2013-5422)

Summary An Information Disclosure Attack vulnerability exists in IBM Rational ClearQuest Web Client. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your IBM ID ---|--- CV...

Security Bulletin: Rational Performance Tester file or path name vulnerability

Summary A security vulnerability exists in IBM Rational Performance Tester that potentially allows access to system files. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with...