IBM Rational Developer for System z Information Disclosure Vulnerability (Win)

Summary
This host is installed with IBM Rational Developer for System z and is prone information disclosure vulnerability.
Impact
Successful exploitation could allow local users to obtain sensitive information via unspecified vectors. Impact Level: Application
Solution
Upgrade to IBM Rational Developer for System z version 8.5.2 or later, For updates refer to http://www.ibm.com/developerworks/downloads/r/rdz/index.html
Insight
The flaw is due to error in the application, which does not properly store the SSL certificate password.
Affected
IBM Rational Developer for System z version 7.1 through 8.5.1 on Windows
References