IBM License Metric Tool 9 before 9.2.1.0 and Endpoint Manager for Software Use Analysis 9 before 9.2.1.0 allow remote authenticated users to bypass intended access restrictions and obtain sensitive information via a REST API request.
| Software | From | Fixed in |
|---|---|---|
| ibm / license_metric_tool | 9.1.0.2 | 9.1.0.2.x |
| ibm / license_metric_tool | 9.1.0.1 | 9.1.0.1.x |
| ibm / license_metric_tool | 9.0 | 9.0.x |
| ibm / license_metric_tool | 9.2.0 | 9.2.0.x |
| ibm / license_metric_tool | 9.0.1 | 9.0.1.x |