IBM Rational Business Developer 8.x before 8.0.1.4 allows remote attackers to obtain potentially sensitive information via a connection to a web service created with the Rational Business Developer product.
https://exchange.xforce.ibmcloud.com/vulnerabilities/78726
http://www.securityfocus.com/bid/55718