Security Bulletin: Oracle Outside In Technology vulnerability in Rational DOORS Next Generation

Summary

A security vulnerability in Oracle Outside In Technology affects Rational DOORS Next Generation.

Vulnerability Details

CVEID:CVE-2019-2903
**DESCRIPTION:**An unspecified vulnerability in product related to the Outside In Technology Oracle Fusion Middleware component could allow an unauthenticated attacker to cause low confidentiality impact, low integrity impact, and low availability impact.
CVSS Base score: 7.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/169216 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

CVEID:CVE-2019-2901
**DESCRIPTION:**An unspecified vulnerability in product related to the Outside In Technology Oracle Fusion Middleware component could allow an unauthenticated attacker to cause low confidentiality impact, low integrity impact, and low availability impact.
CVSS Base score: 7.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/169214 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

CVEID:CVE-2019-2902
**DESCRIPTION:**An unspecified vulnerability in product related to the Outside In Technology Oracle Fusion Middleware component could allow an unauthenticated attacker to cause low confidentiality impact, low integrity impact, and low availability impact.
CVSS Base score: 7.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/169215 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

CVEID:CVE-2019-2972
**DESCRIPTION:**An unspecified vulnerability in product related to the Outside In Technology Oracle Fusion Middleware component could allow an unauthenticated attacker to cause low confidentiality impact, low integrity impact, and low availability impact.
CVSS Base score: 7.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/169278 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

CVEID:CVE-2019-2970
**DESCRIPTION:**An unspecified vulnerability in product related to the Outside In Technology Oracle Fusion Middleware component could allow an unauthenticated attacker to cause low confidentiality impact, low integrity impact, and low availability impact.
CVSS Base score: 7.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/169276 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

CVEID:CVE-2019-2971
**DESCRIPTION:**An unspecified vulnerability in product related to the Outside In Technology Oracle Fusion Middleware component could allow an unauthenticated attacker to cause low confidentiality impact, low integrity impact, and low availability impact.
CVSS Base score: 7.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/169277 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Affected Products and Versions

Remediation/Fixes

For Rational DOORS Next Generation 6.0.2-6.0.6.1, a fix is available by upgrading to

6.0.6.1 iFix007 or later
Rational DOORS Next Generation 6.0.6.1 iFix007

6.0.6 iFix014 or later
Rational DOORS Next Generation 6.0.6 iFix014

6.0.5 iFix016 or later
Rational DOORS Next Generation 6.0.5 iFix016

For any prior versions of the products listed above, IBM recommends upgrading to a fixed, supported version/release/platform of the product.

If the iFix is not found in the iFix Portal please contact IBM support.

Workarounds and Mitigations

None