PT-2016-3634 · Ibm · Ibm Rational Team Concert+7
Published
2016-01-03
·
Updated
2016-01-08
·
CVE-2015-4946
CVSS v2.0
2.1
Low
| Vector | AV:L/AC:L/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Rational Collaborative Lifecycle Management (CLM) versions 3.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1
IBM Rational Quality Manager (RQM) versions 3.x through 3.0.1.6 IF6 and 4.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1
IBM Rational Team Concert (RTC) versions 3.x through 3.0.1.6 IF6 and 4.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1
IBM Rational Requirements Composer (RRC) versions 3.x through 3.0.1.6 IF6 and 4.x through 4.0.7 IF8
IBM Rational DOORS Next Generation (RDNG) versions 4.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1
IBM Rational Engineering Lifecycle Manager (RELM) versions prior to 4.0.7 IF9 and versions prior to 5.0.2 IF9 and versions prior to 6.0.1
IBM Rational Rhapsody Design Manager (DM) versions prior to 4.0.7 IF9 and versions prior to 5.0.2 IF9 and versions prior to 6.0.1
IBM Rational Software Architect Design Manager (DM) versions prior to 4.0.7 IF9 and versions prior to 5.0.2 IF9 and versions prior to 6.0.1
Description
The issue allows local users to bypass intended access restrictions via unspecified vectors.
Recommendations
For IBM Rational Collaborative Lifecycle Management (CLM) versions 3.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1, update to version 4.0.7 IF9, 5.0.2 IF9, or 6.0.1 or later.
For IBM Rational Quality Manager (RQM) versions 3.x through 3.0.1.6 IF6 and 4.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1, update to version 3.0.1.6 IF7, 4.0.7 IF9, 5.0.2 IF9, or 6.0.1 or later.
For IBM Rational Team Concert (RTC) versions 3.x through 3.0.1.6 IF6 and 4.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1, update to version 3.0.1.6 IF7, 4.0.7 IF9, 5.0.2 IF9, or 6.0.1 or later.
For IBM Rational Requirements Composer (RRC) versions 3.x through 3.0.1.6 IF6 and 4.x through 4.0.7 IF8, update to version 3.0.1.6 IF7 or 4.0.7 IF9 or later.
For IBM Rational DOORS Next Generation (RDNG) versions 4.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1, update to version 4.0.7 IF9, 5.0.2 IF9, or 6.0.1 or later.
For IBM Rational Engineering Lifecycle Manager (RELM) versions prior to 4.0.7 IF9 and versions prior to 5.0.2 IF9 and versions prior to 6.0.1, update to version 4.0.7 IF9, 5.0.2 IF9, or 6.0.1 or later.
For IBM Rational Rhapsody Design Manager (DM) versions prior to 4.0.7 IF9 and versions prior to 5.0.2 IF9 and versions prior to 6.0.1, update to version 4.0.7 IF9, 5.0.2 IF9, or 6.0.1 or later.
For IBM Rational Software Architect Design Manager (DM) versions prior to 4.0.7 IF9 and versions prior to 5.0.2 IF9 and versions prior to 6.0.1, update to version 4.0.7 IF9, 5.0.2 IF9, or 6.0.1 or later.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Rational Collaborative Lifecycle Management
Ibm Rational Doors Next Generation
Ibm Rational Engineering Lifecycle Manager
Ibm Rational Quality Manager
Ibm Rational Requirements Composer
Rational Rhapsody Design Manager
Ibm Rational Software Architect Design Manager
Ibm Rational Team Concert