PT-2016-3634
CVE-2015-4946
·
Published
2016-01-03
·
Updated
2016-01-08
Description by
CVSS 2.0
2.1
LowMetricsAV:L/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
IBM Rational Collaborative Lifecycle Management (CLM) versions 3.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1
IBM Rational Quality Manager (RQM) versions 3.x through 3.0.1.6 IF6 and 4.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1
IBM Rational Team Concert (RTC) versions 3.x through 3.0.1.6 IF6 and 4.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1
IBM Rational Requirements Composer (RRC) versions 3.x through 3.0.1.6 IF6 and 4.x through 4.0.7 IF8
IBM Rational DOORS Next Generation (RDNG) versions 4.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1
IBM Rational Engineering Lifecycle Manager (RELM) versions prior to 4.0.7 IF9 and versions prior to 5.0.2 IF9 and versions prior to 6.0.1
IBM Rational Rhapsody Design Manager (DM) versions prior to 4.0.7 IF9 and versions prior to 5.0.2 IF9 and versions prior to 6.0.1
IBM Rational Software Architect Design Manager (DM) versions prior to 4.0.7 IF9 and versions prior to 5.0.2 IF9 and versions prior to 6.0.1
Description
The issue allows local users to bypass intended access restrictions via unspecified vectors.
Recommendations
For IBM Rational Collaborative Lifecycle Management (CLM) versions 3.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1, update to version 4.0.7 IF9, 5.0.2 IF9, or 6.0.1 or later.
For IBM Rational Quality Manager (RQM) versions 3.x through 3.0.1.6 IF6 and 4.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1, update to version 3.0.1.6 IF7, 4.0.7 IF9, 5.0.2 IF9, or 6.0.1 or later.
For IBM Rational Team Concert (RTC) versions 3.x through 3.0.1.6 IF6 and 4.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1, update to version 3.0.1.6 IF7, 4.0.7 IF9, 5.0.2 IF9, or 6.0.1 or later.
For IBM Rational Requirements Composer (RRC) versions 3.x through 3.0.1.6 IF6 and 4.x through 4.0.7 IF8, update to version 3.0.1.6 IF7 or 4.0.7 IF9 or later.
For IBM Rational DOORS Next Generation (RDNG) versions 4.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1, update to version 4.0.7 IF9, 5.0.2 IF9, or 6.0.1 or later.
For IBM Rational Engineering Lifecycle Manager (RELM) versions prior to 4.0.7 IF9 and versions prior to 5.0.2 IF9 and versions prior to 6.0.1, update to version 4.0.7 IF9, 5.0.2 IF9, or 6.0.1 or later.
For IBM Rational Rhapsody Design Manager (DM) versions prior to 4.0.7 IF9 and versions prior to 5.0.2 IF9 and versions prior to 6.0.1, update to version 4.0.7 IF9, 5.0.2 IF9, or 6.0.1 or later.
For IBM Rational Software Architect Design Manager (DM) versions prior to 4.0.7 IF9 and versions prior to 5.0.2 IF9 and versions prior to 6.0.1, update to version 4.0.7 IF9, 5.0.2 IF9, or 6.0.1 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾