IBM Rational Developer for System z Information Disclosure Vulnerability (Win)

  1. Network Vulnerabilities
  2. General
  3. IBM Rational Developer for System z Information Disclosure Vulnerability (Win)
Summary
This host is installed with IBM Rational Developer for System z and is prone information disclosure vulnerability.
Impact
Successful exploitation could allow local users to obtain sensitive information via unspecified vectors. Impact Level: Application
Solution
Upgrade to IBM Rational Developer for System z version 8.5.2 or later, For updates refer to http://www.ibm.com/developerworks/downloads/r/rdz/index.html
Insight
The flaw is due to error in the application, which does not properly store the SSL certificate password.
Affected
IBM Rational Developer for System z version 7.1 through 8.5.1 on Windows
References
Updated on 2015-03-25
Severity
Low Severity
Classification
Related Vulnerabilities