Information disclosure in Ibm Rational License Key Server

CVE-2015-1907

The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4 before 8.1.4.7 allows remote authenticated users to read cookies via unspecified vectors.

Vulnerability class: Information Disclosure

EPSS: 0.016 (73.8th percentile) — read the EPSS interpretation.

Affected products

Ibm Rational_license_key_server — versions 8.1.4, 8.1.4.2, 8.1.4.3
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
psirt@us.ibm.com (vdb-entry, x_refsource_BID)
psirt@us.ibm.com (vdb-entry, x_refsource_SECTRACK)