IBM RLKS Administration and Reporting Tool CVE-2014-0909 Information Disclosure Vulnerability

Bugtraq ID:	69642
Class:	Design Error
CVE:	CVE-2014-0909
Remote:	Yes
Local:	No
Published:	Sep 04 2014 12:00AM
Updated:	Sep 04 2014 12:00AM
Credit:	IBM
Vulnerable:	IBM RLKS Administration and Reporting Tool 8.1.4.3 IBM RLKS Administration and Reporting Tool 8.1.4.2 IBM RLKS Administration and Reporting Tool 8.1.4
Not Vulnerable:

IBM RLKS Administration and Reporting Tool CVE-2014-0909 Information Disclosure Vulnerability

IBM RLKS Administration and Reporting Tool is prone to a remote information-disclosure vulnerability.

Successful exploits will allow attackers to obtain sensitive information. This may aid in further attacks.

IBM RLKS Administration and Reporting Tool 8.1.4, 8.1.4.2, and 8.1.4.3 are vulnerable.

IBM RLKS Administration and Reporting Tool CVE-2014-0909 Information Disclosure Vulnerability

An attacker can exploit this issue using readily available tools.

IBM RLKS Administration and Reporting Tool CVE-2014-0909 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM RLKS Administration and Reporting Tool CVE-2014-0909 Information Disclosure Vulnerability

References:

• Rational License Key Server Administration & Reporting Tool Homepage (IBM)
  
• Rational License Key Server Administration and Reporting Tool vulnerability (IBM)