PT-2016-3634

CVE-2015-4946

·

Published

2016-01-03

·

Updated

2016-01-08

Description by

CVSS 2.0
2.1
Low
MetricsAV:L/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management (CLM) versions 3.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1 IBM Rational Quality Manager (RQM) versions 3.x through 3.0.1.6 IF6 and 4.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1 IBM Rational Team Concert (RTC) versions 3.x through 3.0.1.6 IF6 and 4.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1 IBM Rational Requirements Composer (RRC) versions 3.x through 3.0.1.6 IF6 and 4.x through 4.0.7 IF8 IBM Rational DOORS Next Generation (RDNG) versions 4.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1 IBM Rational Engineering Lifecycle Manager (RELM) versions prior to 4.0.7 IF9 and versions prior to 5.0.2 IF9 and versions prior to 6.0.1 IBM Rational Rhapsody Design Manager (DM) versions prior to 4.0.7 IF9 and versions prior to 5.0.2 IF9 and versions prior to 6.0.1 IBM Rational Software Architect Design Manager (DM) versions prior to 4.0.7 IF9 and versions prior to 5.0.2 IF9 and versions prior to 6.0.1
Description The issue allows local users to bypass intended access restrictions via unspecified vectors.
Recommendations For IBM Rational Collaborative Lifecycle Management (CLM) versions 3.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1, update to version 4.0.7 IF9, 5.0.2 IF9, or 6.0.1 or later. For IBM Rational Quality Manager (RQM) versions 3.x through 3.0.1.6 IF6 and 4.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1, update to version 3.0.1.6 IF7, 4.0.7 IF9, 5.0.2 IF9, or 6.0.1 or later. For IBM Rational Team Concert (RTC) versions 3.x through 3.0.1.6 IF6 and 4.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1, update to version 3.0.1.6 IF7, 4.0.7 IF9, 5.0.2 IF9, or 6.0.1 or later. For IBM Rational Requirements Composer (RRC) versions 3.x through 3.0.1.6 IF6 and 4.x through 4.0.7 IF8, update to version 3.0.1.6 IF7 or 4.0.7 IF9 or later. For IBM Rational DOORS Next Generation (RDNG) versions 4.x through 4.0.7 IF8 and 5.x through 5.0.2 IF8 and versions prior to 6.0.1, update to version 4.0.7 IF9, 5.0.2 IF9, or 6.0.1 or later. For IBM Rational Engineering Lifecycle Manager (RELM) versions prior to 4.0.7 IF9 and versions prior to 5.0.2 IF9 and versions prior to 6.0.1, update to version 4.0.7 IF9, 5.0.2 IF9, or 6.0.1 or later. For IBM Rational Rhapsody Design Manager (DM) versions prior to 4.0.7 IF9 and versions prior to 5.0.2 IF9 and versions prior to 6.0.1, update to version 4.0.7 IF9, 5.0.2 IF9, or 6.0.1 or later. For IBM Rational Software Architect Design Manager (DM) versions prior to 4.0.7 IF9 and versions prior to 5.0.2 IF9 and versions prior to 6.0.1, update to version 4.0.7 IF9, 5.0.2 IF9, or 6.0.1 or later.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾