Security Bulletin: Open Source Apache Tomcat - 4 issues (CVE-2013-4286) for RAF

Summary

Previous releases of IBM Rational Automation Framework (RAF) are affected by the vulnerabilitie in Apache Tomcat that may allow remote attackers to influence the availability of the Framework Server.

Vulnerability Details

| Subscribe to My Notifications to be notified of important product support alerts like this.

• Follow this link for more information (requires login with your IBM ID)
  —|—

CVE ID:CVE-2013-4286** **

Description: Open Source Apache Tomcat - HTTP request smuggling issue.

CVSS Base Score: 4.3 **CVSS Temporal Score:**See <https://exchange.xforce.ibmcloud.com/vulnerabilities/91426&gt; for the current score. *CVSS Environmental Score:**Undefined CVSS Vector: (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Affected Products and Versions

Rational Automation Framework 3.0.1, 3.0.1.1 and 3.0.1.2 on all supported platforms.

Remediation/Fixes

For all affected versions of Rational Automation Framework_
_Upgrade to Rational Automation Framework version 3.0.1.2_iFix1 or later.

Workarounds and Mitigations

None