Path Traversal in IBM Rational License Key Server
CVE-2011-1389
Multiple directory traversal vulnerabilities in the vendor daemon in Rational Common Licensing in Telelogic License Server 2.0, Rational License Server 7.x, and ibmratl in IBM Rational License Key Server (RLKS) 8.0 through 8.1.2 allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files. NOTE: this might overlap CVE-2011-4135.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.072 (93.7th percentile) — read the EPSS interpretation.
Affected products
- Ibm Rational_license_key_server — versions 8.0, 8.1, 8.1.1
- Ibm Rational_license_server — versions 7.0, 7.1, 7.5
- Ibm Telelogic_license_server — versions 2.0
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2011-1389?
- CVE-2011-1389 is a vulnerability in IBM Rational License Key Server, classified under Path Traversal. Published 2012-01-19.
- Is CVE-2011-1389 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.