{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"IBM Rational Publishing Engine 1.1.2.1","product":{"name":"N/A","vendor":{"name":"IBM","scada":false}}},{"description":"IBM Rational Publishing Engine 1.1.2","product":{"name":"N/A","vendor":{"name":"IBM","scada":false}}},{"description":"IBM Rational Publishing Engine 1.1.2.2","product":{"name":"N/A","vendor":{"name":"IBM","scada":false}}},{"description":"IBM Rational Publishing Engine 1.1.1.2","product":{"name":"N/A","vendor":{"name":"IBM","scada":false}}}],"affected_systems_content":null,"content":"## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2012-2159","url":"https://www.cve.org/CVERecord?id=CVE-2012-2159"},{"name":"CVE-2012-0501","url":"https://www.cve.org/CVERecord?id=CVE-2012-0501"},{"name":"CVE-2012-2161","url":"https://www.cve.org/CVERecord?id=CVE-2012-2161"}],"links":[],"reference":"CERTA-2012-AVI-735","revisions":[{"description":"version initiale.","revision_date":"2012-12-14T00:00:00.000000"}],"risks":[{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"},{"description":"Injection de code indirecte \u00e0 distance"}],"summary":"Trois vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans <span class=\"textit\">IBM\nRational Publishing Engine</span> (RPE). La premi\u00e8re concerne le\ncomposant <span class=\"textit\">Java Runtime Environment</span>. La\nseconde permet de rediriger la navigation Web d'un utilisateur vers un\nsite ill\u00e9gitime. La derni\u00e8re affecte le syst\u00e8me d'aide et peut mener un\nutilisateur malintentionn\u00e9 \u00e0 effectuer des injections de codes\nindirectes \u00e0 distance.\n","title":"Multiples vuln\u00e9rabilit\u00e9s dans IBM Rational Publishing Engine","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 IBM swg21617746 du 12 d\u00e9cembre 2012","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21617746"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 IBM swg21619410 du 12 d\u00e9cembre 2012","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21619410"}]}