Security Bulletin: Vulnerability in Rational Software Architect Design Manager (CVE-2013-0599)

Summary

A parameter path to the IBM Rational Software Architect Design Manager server help documentation causes an error message response from the server with HTTP ERROR 500 debug information displayed in the browser.

Vulnerability Details

| Subscribe to My Notifications to be notified of important product support alerts like this.

• Follow this link for more information (requires login with your IBM ID)
  —|—

CVE ID: CVE-2013-0599

**Description:**A parameter path to the Rational Software Architect Design Manager server help documentation causes an error message response from the server with HTTP ERROR 500 debug information displayed in the browser.

CVSS Base Score: 5 **CVSS Temporal Score: **See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83613&gt; for the current score *CVSS Environmental Score:**Undefined CVSS Vector: (AV:N/AC:L/AU:N/C:P/I:N/A:N)

Affected Products and Versions

Rational Software Architect Design Manager versions 3.0, 3.0.0.1, 3.0.1, 4.0, 4.0.1, 4.0.2.

Remediation/Fixes

Upgrade to Rational Software Architect Design Manager 4.0.3 or later.

Workarounds and Mitigations

None