Lucene search

K
cve[email protected]CVE-2015-1913
HistoryJun 30, 2015 - 10:59 a.m.

CVE-2015-1913

2015-06-3010:59:00
CWE-310
web.nvd.nist.gov
24
ibm
rational test workbench
rational test virtualization server
cve-2015-1913
security
vulnerability
md5
password hashing

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

67.8%

Rational Test Control Panel in IBM Rational Test Workbench and Rational Test Virtualization Server 8.0.0.x before 8.0.0.5, 8.0.1.x before 8.0.1.6, 8.5.0.x before 8.5.0.4, 8.5.1.x before 8.5.1.5, 8.6.0.x before 8.6.0.4, and 8.7.0.x before 8.7.0.2 uses the MD5 algorithm for password hashing, which makes it easier for remote attackers to bypass authentication via unspecified vectors.

Affected configurations

NVD
Node
ibmrational_test_virtualization_serverMatch8.0.0
OR
ibmrational_test_virtualization_serverMatch8.0.0.1
OR
ibmrational_test_virtualization_serverMatch8.0.0.2
OR
ibmrational_test_virtualization_serverMatch8.0.0.3
OR
ibmrational_test_virtualization_serverMatch8.0.0.4
OR
ibmrational_test_virtualization_serverMatch8.0.1
OR
ibmrational_test_virtualization_serverMatch8.0.1.1
OR
ibmrational_test_virtualization_serverMatch8.0.1.2
OR
ibmrational_test_virtualization_serverMatch8.0.1.3
OR
ibmrational_test_virtualization_serverMatch8.0.1.4
OR
ibmrational_test_virtualization_serverMatch8.0.1.5
OR
ibmrational_test_virtualization_serverMatch8.5.0
OR
ibmrational_test_virtualization_serverMatch8.5.0.1
OR
ibmrational_test_virtualization_serverMatch8.5.0.2
OR
ibmrational_test_virtualization_serverMatch8.5.0.3
OR
ibmrational_test_virtualization_serverMatch8.5.1
OR
ibmrational_test_virtualization_serverMatch8.5.1.1
OR
ibmrational_test_virtualization_serverMatch8.5.1.2
OR
ibmrational_test_virtualization_serverMatch8.5.1.3
OR
ibmrational_test_virtualization_serverMatch8.5.1.4
OR
ibmrational_test_virtualization_serverMatch8.6.0
OR
ibmrational_test_virtualization_serverMatch8.6.0.1
OR
ibmrational_test_virtualization_serverMatch8.6.0.2
OR
ibmrational_test_virtualization_serverMatch8.6.0.3
OR
ibmrational_test_virtualization_serverMatch8.7.0
OR
ibmrational_test_virtualization_serverMatch8.7.0.1
Node
ibmrational_test_workbenchMatch8.0.0
OR
ibmrational_test_workbenchMatch8.0.0.1
OR
ibmrational_test_workbenchMatch8.0.0.2
OR
ibmrational_test_workbenchMatch8.0.0.3
OR
ibmrational_test_workbenchMatch8.0.0.4
OR
ibmrational_test_workbenchMatch8.0.1
OR
ibmrational_test_workbenchMatch8.0.1.1
OR
ibmrational_test_workbenchMatch8.0.1.2
OR
ibmrational_test_workbenchMatch8.0.1.3
OR
ibmrational_test_workbenchMatch8.0.1.4
OR
ibmrational_test_workbenchMatch8.0.1.5
OR
ibmrational_test_workbenchMatch8.5.0
OR
ibmrational_test_workbenchMatch8.5.0.1
OR
ibmrational_test_workbenchMatch8.5.0.2
OR
ibmrational_test_workbenchMatch8.5.0.3
OR
ibmrational_test_workbenchMatch8.5.1
OR
ibmrational_test_workbenchMatch8.5.1.1
OR
ibmrational_test_workbenchMatch8.5.1.2
OR
ibmrational_test_workbenchMatch8.5.1.3
OR
ibmrational_test_workbenchMatch8.5.1.4
OR
ibmrational_test_workbenchMatch8.6.0
OR
ibmrational_test_workbenchMatch8.6.0.1
OR
ibmrational_test_workbenchMatch8.6.0.2
OR
ibmrational_test_workbenchMatch8.6.0.3
OR
ibmrational_test_workbenchMatch8.7.0
OR
ibmrational_test_workbenchMatch8.7.0.1

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

67.8%

Related for CVE-2015-1913