PT-2018-4587
CVE-2016-0219
·
تاريخ النشر
2018-01-16
·
تاريخ التحديث
2018-02-05
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
IBM Rational Team Concert versions 3.0 through 3.0.1.6 iFix7 Interim Fix 1
IBM Rational Team Concert versions 4.0 through 4.0.7 iFix10
IBM Rational Team Concert versions 5.0 through 5.0.2 iFix15
IBM Rational Team Concert versions 6.0 through 6.0.1 iFix4
Description
The issue allows remote authenticated users to cause a denial of service via crafted XML data, specifically through an XML external entity (XXE) vulnerability.
Recommendations
For versions 3.0 through 3.0.1.6 iFix7 Interim Fix 1, update to 3.0.1.6 iFix7 Interim Fix 1 or later.
For versions 4.0 through 4.0.7 iFix10, update to 4.0.7 iFix10 or later.
For versions 5.0 through 5.0.2 iFix15, update to 5.0.2 iFix15 or later.
For versions 6.0 through 6.0.1 iFix4, update to 6.0.1 iFix4 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾