Description
The Host Connect emulator in IBM Rational Developer for System z 7.1 through 8.5.1 does not properly store the SSL certificate password, which allows local users to obtain sensitive information via unspecified vectors.
References
- rdz-ssl-info-disclosure(79919) vdb-entry
- 1027818 vdb-entry
- http://www.ibm.com/support/docview.wss?uid=swg21617886
- 51401 third-party-advisory
- 56725 vdb-entry