Security Bulletin: Security vulnerability in Oracle Java 7 impacts IBM Rational Change (CVE-2013-0422)

Summary Potential security vulnerability issues may occur if you are using the Oracle Java 7 updates reported in Oracle Security Alert for CVE-2013-0422 when using IBM Rational Change product. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts...

Security Bulletin: Rational License Key Server vulnerability affecting license server, lmgrd, and the vendor daemon, ibmratl (CVE-2011-1389)

Summary A possible security vulnerability has been reported in the FlexNet Publisher lmgrd license server manager as well as vendor daemons. There have been no reported exploits of this possible vulnerability, and to date it has not been reported by FlexNetSoftware users. Vulnerability Details |...

Security Bulletin: ClearQuest Phishing Through Frames Vulnerability (CVE-2012-4839)

Summary Security Scanning indicated a vulnerability to a Phishing Through Frames attack in the OSLC system in IBM Rational ClearQuest. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires...

Security Bulletin: ClearQuest SQL Error Message Attack Vulnerability (CVE-2012-5765)

Summary IBM Rational ClearQuest Web client contains SQL Error Message Attack vulnerability. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your IBM ID ---|--- CVE ID:...

Security Bulletin: IBM Rational ClearCase update for security vulnerabilities in OpenSSL component

Summary IBM Rational ClearCase uses the OpenSSL component for establishing SSL connections. ClearCase now ships an updated version of OpenSSL on Unix and Linux platforms, and uses a new component called IBM GSKit on Windows which also mitigates against the OpenSSL vulnerabilities. Vulnerability...

Security Bulletin: Potential Denial of Service security vulnerability in Rational Insight running on WAS or eWAS due to Java HashTable implementation vulnerability (CVE-2012-0193)

Summary Products bundled with an embedded IBM WebSphere Application Server eWAS or IBM WebSphere Application Server WAS are subject to a potential security exposure due to the Java HashTable implementation which can result in a Denial of Service DoS exposure when using Web based applications such...

Security Bulletin: Vulnerabilities in RequisiteWeb (CVE-2012-2203, CVE-2012-2191)

Summary Notice of security vulnerabilities which impact IBM Rational RequisiteWeb RequisiteWeb along with instructions to resolve the issues. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information...

Security Bulletin: Notice of IBM WebSphere Application Server security vulnerability fixes for Rational ClearCase and ClearQuest (CVE-2012-2170)

Summary IBM Rational ClearCase and ClearQuest use IBM WebSphere Application Server WAS which has security corrections. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your...

Security Bulletin: IBM Rational ClearQuest security vulnerability fixes for CVE-2012-2203

Summary IBM Rational ClearQuest uses the IBM GSKit component to establish SSL connections to an LDAP directory server for LDAP authentication. ClearQuest 7.1.2.8 and 8.0.0.4 install updated versions of GSKit which contain corrections for security vulnerability CVE-2012-2203 Vulnerability Details ...

Security Bulletin: ClearQuest Cross-Site Scripting (XSS) Vulnerability (CVE-2012-2169)

Summary IBM Rational ClearQuest Web client contains a Cross-Site Scripting vulnerability. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your IBM ID ---|--- CVE ID:...

Security Bulletin: ClearQuest Cross-Site Scripting (XSS) Vulnerability (CVE-2012-2205)

Summary IBM Rational ClearQuest Web client contains a Cross-Site Scripting vulnerability. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your IBM ID ---|--- CVE ID:...

Security Bulletin: ClearQuest Help System cross-site scripting (CVE-2012-2161)

Summary The IBM Rational ClearQuest Help component contains a reflected Cross-Site Scripting vulnerability. With reflected cross-site scripting, an attacker can inject arbitrary HTML or JavaScript code into the victim's web browser. The victim has to click a malicious link; the attacker's code is...

Security Bulletin: ClearQuest Help System Open Redirect (CVE-2012-2159)

Summary Some scripts inside the IBM Rational ClearQuest web help application are vulnerable to Open Redirect attacks. Exploiting this vulnerability allows an attacker to provide a link to the victim which directs to the trusted website. If the user visits the link to the trusted website, the user...

Security Bulletin: Encrypted passwords field available in result set of User record type (CVE-2012-2165)

Summary The encrypted password field for a user is available to IBM Rational ClearQuest queries and can be displayed in a result set. This is an information disclosure that may assist an attacker in attempts to construct passwords that match that encrypted value. Vulnerability Details | Subscribe...

Security Bulletin: Rational Directory Server Help system can be affected by Open Redirect and Cross Site Scripting vulnerability

Summary Security vulnerabilities have been discovered in the IBM Rational Directory Server RDS Help system shipped with the product. When the Help file is opened in Rational Directory Administrator, the 'href' parameter in advanced/deferredView.jsp causes the followng security vulnerabilities: Op...

Security Bulletin: SQL Injection for IBM Rational ClearQuest Maintenance tool (CVE-2011-1390)

Summary The IBM Rational ClearQuest Maintenance tool on Microsoft Windows platforms contains a feature to upgrade the user database. This feature is subject to a SQL Injection attack. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like thi...

Security Bulletin: Rational ClearQuest CQOle ActiveX Control Remote Execution Vulnerability (CVE-2012-0708)

Summary A defect has been discovered where an IBM Rational ClearQuest Ole API function can be called with incorrect parameters causing a crash or possible execution of attack code. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this...

Security Bulletin: Potential Denial of Service security vulnerability in Rational Asset Manager running on WAS or eWAS due to Java HashTable implementation vulnerability (CVE-2012-0193)

Summary Products bundled with an embedded IBM WebSphere Application Server eWAS or IBM WebSphere Application Server WAS are subject to a potential security exposure due to the Java HashTable implementation which can result in a Denial of Service DoS exposure when using Web based applications such...

Security Bulletin: Potential Denial of Service security vulnerability in Rational ClearCase and Rational ClearQuest running on WAS or eWAS due to Java HashTable implementation vulnerability (CVE-2012-0193)

Summary Products bundled with an embedded IBM WebSphere Application Server eWAS or IBM WebSphere Application Server WAS are subject to a potential security exposure due to the Java HashTable implementation which can result in a Denial of Service DoS exposure when using Web based applications such...

Security Bulletin: Vulnerability in Rational License Key Server affecting both the license server, lmgrd, and the vendor daemon, ibmratl (CVE-2011-1389)

Summary meta http-equiv="Refresh" CONTENT="0; URL=http://www.ibm.com/support/docview.wss?uid=swg21622287" Security Bulletin: Rational License Key Server vulnerability CVE-2011-1389, CVE-2011-4135 Vulnerability Details Click browser refresh button to be redirected to Security Bulletin: IBM Rationa...