IBM » Rational License Key Server : Security Vulnerabilities, CVEs,
The Administration and Reporting tool in IBM Rational License Key Server (RLKS) before 8.1.4.9 iFix 04 allows local users to obtain sensitive information via unspecified vectors. IBM X-Force ID: 106938.
Max CVSS
3.3
EPSS Score
0.04%
Published
2018-03-26
Updated
2018-04-24
The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4 before 8.1.4.7 allows remote authenticated users to read cookies via unspecified vectors.
Max CVSS
4.0
EPSS Score
0.11%
Published
2015-05-08
Updated
2016-11-30
The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 allows remote authenticated users to hijack sessions via unspecified vectors.
Max CVSS
3.5
EPSS Score
0.16%
Published
2014-09-10
Updated
2017-08-29
The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 allows remote authenticated users to bypass authorization checks and visit unspecified URLs with license-usage data via a DESCRIBE clause in a SPARQL query.
Max CVSS
2.1
EPSS Score
0.17%
Published
2014-09-10
Updated
2017-08-29
The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
Max CVSS
5.0
EPSS Score
0.31%
Published
2014-09-10
Updated
2017-08-29
Multiple directory traversal vulnerabilities in the vendor daemon in Rational Common Licensing in Telelogic License Server 2.0, Rational License Server 7.x, and ibmratl in IBM Rational License Key Server (RLKS) 8.0 through 8.1.2 allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files. NOTE: this might overlap CVE-2011-4135.
Max CVSS
10.0
EPSS Score
13.54%
Published
2012-01-19
Updated
2017-08-17
6 vulnerabilities found