The host is running Tomcat server in IBM Rational Quality Manager/ IBM Rational Test Lab Manager has a default password for the ADMIN account.
Successful exploitation will allow attackers to execute arbitrary code in the context of an affected application. Impact Level: Application.
Upgrade to version 126.96.36.199 build 1046 or higher For updates refer to https://www.ibm.com/developerworks/rational/products/testmanager
The flaw exists within the installation of the bundled Tomcat server. The default ADMIN account is improperly disabled within 'tomcat-users.xml' with default password. A remote attacker can use this vulnerability to execute arbitrary code under the context of the Tomcat server.
Versions prior to IBM Rational Quality Manager and IBM Test Lab Manager 188.8.131.52 build:1046