Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2015-5045

Disclosure Date: March 26, 2018 (last updated November 26, 2024)
The Administration and Reporting tool in IBM Rational License Key Server (RLKS) before 8.1.4.9 iFix 04 allows local users to obtain sensitive information via unspecified vectors. IBM X-Force ID: 106938.
0
Attacker Value
Unknown

CVE-2015-1907

Disclosure Date: May 08, 2015 (last updated October 05, 2023)
The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4 before 8.1.4.7 allows remote authenticated users to read cookies via unspecified vectors.
0
Attacker Value
Unknown

CVE-2014-3079

Disclosure Date: September 10, 2014 (last updated October 05, 2023)
The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 allows remote authenticated users to bypass authorization checks and visit unspecified URLs with license-usage data via a DESCRIBE clause in a SPARQL query.
0
Attacker Value
Unknown

CVE-2014-4756

Disclosure Date: September 10, 2014 (last updated October 05, 2023)
The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 allows remote authenticated users to hijack sessions via unspecified vectors.
0
Attacker Value
Unknown

CVE-2014-0909

Disclosure Date: September 10, 2014 (last updated October 05, 2023)
The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
0