CVE-2016-5967: IBM Rational Asset Analyzer

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

The installation component in IBM Rational Asset Analyzer (RAA) 6.1.0 before FP10 allows local users to discover the WAS Admin password by reading IM native logs.

Affected products

• IBM Rational Asset Analyzer: version 6.1.0 only; version 6.1.0.1 only; version 6.1.0.2 only; version 6.1.0.3 only; version 6.1.0.4 only; version 6.1.0.5 only; …

Published 2016-11-25. Last modified 2026-06-17.