PT-2018-4414 · Ibm · Ibm Rational Team Concert+7

Published 2018-03-15 · Updated 2018-04-11 · CVE-2015-7440

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management (CLM) versions 3.0.1 through 3.0.1.6 iFix7 Interim Fix 1, versions 4.0.x through 4.0.7 iFix10, versions 5.0.x through 5.0.2 iFix15, and versions 6.0.x through 6.0.1 iFix4 Rational Quality Manager (RQM) versions 3.0.x through 3.0.1.6 iFix7 Interim Fix 1, versions 4.0.x through 4.0.7 iFix10, versions 5.0.x through 5.0.2 iFix15, and versions 6.0.x through 6.0.1 iFix4 Rational Team Concert (RTC) versions 3.0.x through 3.0.1.6 iFix7 Interim Fix 1, versions 4.0.x through 4.0.7 iFix10, versions 5.0.x through 5.0.2 iFix15, and versions 6.0.x through 6.0.1 iFix4 Rational Requirements Composer (RRC) versions 3.0.x through 3.0.1.6 iFix7 Interim Fix 1 and versions 4.0.x through 4.0.7 iFix10 Rational DOORS Next Generation (RDNG) versions 4.0.x through 4.0.7 iFix10, versions 5.0.x through 5.0.2 iFix15, and versions 6.0.x through 6.0.1 iFix4 Rational Engineering Lifecycle Manager (RELM) versions 4.0.3 through 4.0.7 before iFix10, versions 5.0.x through 5.0.2 iFix1, and versions 6.0.x through 6.0.2 Rational Rhapsody Design Manager (Rhapsody DM) versions 4.0.x through 4.0.7 iFix10, versions 5.0.x through 5.0.2 iFix15, and versions 6.0.x through 6.0.1 iFix4 Rational Software Architect Design Manager (RSA DM) versions 4.0.x through 4.0.7 iFix10, versions 5.0.x through 5.0.2 iFix15, and versions 6.0.x through 6.0.1 iFix4

Description The issue might allow local users to gain privileges via unspecified vectors.

Recommendations IBM Rational Collaborative Lifecycle Management (CLM) versions 3.0.1 through 3.0.1.6 iFix7 Interim Fix 1: Update to version 3.0.1.6 iFix7 Interim Fix 1 or later. IBM Rational Collaborative Lifecycle Management (CLM) versions 4.0.x through 4.0.7 iFix10: Update to version 4.0.7 iFix10 or later. IBM Rational Collaborative Lifecycle Management (CLM) versions 5.0.x through 5.0.2 iFix15: Update to version 5.0.2 iFix15 or later. IBM Rational Collaborative Lifecycle Management (CLM) versions 6.0.x through 6.0.1 iFix4: Update to version 6.0.1 iFix4 or later. Rational Quality Manager (RQM) versions 3.0.x through 3.0.1.6 iFix7 Interim Fix 1: Update to version 3.0.1.6 iFix7 Interim Fix 1 or later. Rational Quality Manager (RQM) versions 4.0.x through 4.0.7 iFix10: Update to version 4.0.7 iFix10 or later. Rational Quality Manager (RQM) versions 5.0.x through 5.0.2 iFix15: Update to version 5.0.2 iFix15 or later. Rational Quality Manager (RQM) versions 6.0.x through 6.0.1 iFix4: Update to version 6.0.1 iFix4 or later. Rational Team Concert (RTC) versions 3.0.x through 3.0.1.6 iFix7 Interim Fix 1: Update to version 3.0.1.6 iFix7 Interim Fix 1 or later. Rational Team Concert (RTC) versions 4.0.x through 4.0.7 iFix10: Update to version 4.0.7 iFix10 or later. Rational Team Concert (RTC) versions 5.0.x through 5.0.2 iFix15: Update to version 5.0.2 iFix15 or later. Rational Team Concert (RTC) versions 6.0.x through 6.0.1 iFix4: Update to version 6.0.1 iFix4 or later. Rational Requirements Composer (RRC) versions 3.0.x through 3.0.1.6 iFix7 Interim Fix 1: Update to version 3.0.1.6 iFix7 Interim Fix 1 or later. Rational Requirements Composer (RRC) versions 4.0.x through 4.0.7 iFix10: Update to version 4.0.7 iFix10 or later. Rational DOORS Next Generation (RDNG) versions 4.0.x through 4.0.7 iFix10: Update to version 4.0.7 iFix10 or later. Rational DOORS Next Generation (RDNG) versions 5.0.x through 5.0.2 iFix15: Update to version 5.0.2 iFix15 or later. Rational DOORS Next Generation (RDNG) versions 6.0.x through 6.0.1 iFix4: Update to version 6.0.1 iFix4 or later. Rational Engineering Lifecycle Manager (RELM) versions 4.0.3 through 4.0.7 before iFix10: Update to version 4.0.7 iFix10 or later. Rational Engineering Lifecycle Manager (RELM) versions 5.0.x through 5.0.2 iFix1: Update to version 5.0.2 iFix1 or later. Rational Engineering Lifecycle Manager (RELM) versions 6.0.x through 6.0.2: Update to version 6.0.2 or later. Rational Rhapsody Design Manager (Rhapsody DM) versions 4.0.x through 4.0.7 iFix10: Update to version 4.0.7 iFix10 or later. Rational Rhapsody Design Manager (Rhapsody DM) versions 5.0.x through 5.0.2 iFix15: Update to version 5.0.2 iFix15 or later. Rational Rhapsody Design Manager (Rhapsody DM) versions 6.0.x through 6.0.1 iFix4: Update to version 6.0.1 iFix4 or later. Rational Software Architect Design Manager (RSA DM) versions 4.0.x through 4.0.7 iFix10: Update to version 4.0.7 iFix10 or later. Rational Software Architect Design Manager (RSA DM) versions 5.0.x through 5.0.2 iFix15: Update to version 5.0.2 iFix15 or later. Rational Software Architect Design Manager (RSA DM) versions 6.0.x through 6.0.1 iFix4: Update to version 6.0.1 iFix4 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-7440

Affected Products

Ibm Rational Collaborative Lifecycle Management

Ibm Rational Doors Next Generation

Ibm Rational Engineering Lifecycle Manager

Ibm Rational Quality Manager

Ibm Rational Requirements Composer

Rational Rhapsody Design Manager

Ibm Rational Software Architect Design Manager

Ibm Rational Team Concert

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-7440 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/108098 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21982747 · Vendor Advisory