Vulnerability Bulletins |
IBM Security Bulletin: Vulnerabilities in Ruby on Rails affect IBM License Metric Tool and IBM Endpoint Manager for Software Use Analysis (CVE-2015-3226) |
|
| Affected software | IBM |
|
A vulnerability in ActiveSupport component of Ruby on Rails framework used by IBM License Metric Tool and IBM Endpoint Manager for Software Use Analysis allows for stealing authentication cookies with cross-site scripting attack . CVE(s): CVE-2015-3226 Affected product(s) and affected version(s): IBM License Metric Tool v9 IBM Endpoint Manager for Software Use Analysis v9 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin: More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_vulnerabilities_in_ruby_on_rails_affect_ibm_license_metric_tool_and_ibm_endpoint_manager_for_software_use_analysis_cve_2015_3226?lang=en_us |
|