Multiple vulnerabilities have been reported in IBM Rational AppScan and Rational Policy Tester, which can be exploited by malicious users to disclose certain information and by malicious people to bypass certain security restrictions, conduct cross-site scripting attacks, disclose potentially sensitive information, hijack a user's session, conduct DNS cache poisoning attacks, manipulate certain data, cause a DoS (Denial of Service), and compromise a vulnerable system.

1) An unspecified error when using function variables can be exploited to execute arbitrary code.

2) Some vulnerabilities are caused due to a bundled vulnerable version of Apache Tomcat.

For more information:
SA43198
SA44981
SA45232
SA45641
SA45748

3) Some vulnerabilities are caused due to a bundled vulnerable version of Java.

For more information:
SA46512

The vulnerabilities are reported in the following products:
* IBM Rational AppScan Enterprise and IBM Rational AppScan Reporting Console versions prior to 8.6.0.1.
* IBM Rational Policy Tester versions prior to 8.5.0.2.

Solution
Update to a fixed version.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
IBM:
http://www.ibm.com/support/docview.wss?uid=swg21609004

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers