CVE-2011-1389

CVE-2011-1389 affects IBM Rational License Key Server (RLKS) 8.0–8.1.x and related Telelogic/Rational license servers. The vendor daemon (ibmratl) and lmgrd contain directory traversal and file-rename/load bugs that enable remote code execution via log file operations. Connected sources also refe...

CVE-2015-1907

IBM RLKS Administration and Reporting Tool (CVE-2015-1907) affects RLKS 8.1.4 through 8.1.4.6; a vulnerability allows remote authenticated users to read cookie-based authentication data. IBM fixes this in version 8.1.4.7. No exploits reported per the IBM bulletin; upgrade recommended to mitigate.

CVE-2014-3079

IBM RLKS Administration and Reporting Tool (8.1.4.x) prior to 8.1.4.4 is affected by multiple CVEs. CVE-2014-3079 allows remote authenticated users to bypass authorization via a DESCRIBE clause in a SPARQL query, potentially accessing license-usage data. CVE-2014-0909 and CVE-2014-4756 describe c...

CVE-2015-5045

CVE-2015-5045 affects IBM RLKS Administration and Reporting Tool. The vulnerability allows a local attacker to obtain sensitive information from RLKS before version 8.1.4.9 iFix 04 due to an unspecified issue in the Administration and Reporting Tool. Affected versions include 8.1.4 and 8.1.4.x up...

CVE-2014-4756

The IBM RLKS Administration and Reporting Tool (RLKS) in versions 8.1.4.x prior to 8.1.4.4 is affected by CVE-2014-4756, allowing remote authenticated users to hijack sessions via unspecified vectors. The issue is documented with a Low risk score (CVSS v2 base 3.5) and is fixed in Rational Licens...

CVE-2014-0909

The IBM Rational License Key Server (RLKS) Administration and Reporting Tool, versions 8.1.4.x prior to 8.1.4.4, is affected by CVE-2014-0909 due to not setting the secure flag on the session cookie in SSL mode. This allows an attacker to potentially capture the cookie by intercepting traffic in ...