27 matches found
Authorization
The Administration and Reporting Tool in IBM Rational License Key Server RLKS 8.1.4.x before 8.1.4.4 allows remote authenticated users to bypass authorization checks and visit unspecified URLs with license-usage data via a DESCRIBE clause in a SPARQL query...
CVE-2014-3079
IBM RLKS Administration and Reporting Tool (8.1.4.x) prior to 8.1.4.4 is affected by multiple CVEs. CVE-2014-3079 allows remote authenticated users to bypass authorization via a DESCRIBE clause in a SPARQL query, potentially accessing license-usage data. CVE-2014-0909 and CVE-2014-4756 describe c...
CVE-2014-3079
The Administration and Reporting Tool in IBM Rational License Key Server RLKS 8.1.4.x before 8.1.4.4 allows remote authenticated users to bypass authorization checks and visit unspecified URLs with license-usage data via a DESCRIBE clause in a SPARQL query...
CVE-2014-4756
The IBM RLKS Administration and Reporting Tool (RLKS) in versions 8.1.4.x prior to 8.1.4.4 is affected by CVE-2014-4756, allowing remote authenticated users to hijack sessions via unspecified vectors. The issue is documented with a Low risk score (CVSS v2 base 3.5) and is fixed in Rational Licens...
CVE-2014-0909
The IBM Rational License Key Server (RLKS) Administration and Reporting Tool, versions 8.1.4.x prior to 8.1.4.4, is affected by CVE-2014-0909 due to not setting the secure flag on the session cookie in SSL mode. This allows an attacker to potentially capture the cookie by intercepting traffic in ...
CVE-2014-0909
The Administration and Reporting Tool in IBM Rational License Key Server RLKS 8.1.4.x before 8.1.4.4 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...