Lucene search

[email protected]NVD:CVE-2015-0113

HistoryApr 27, 2015 - 11:59 a.m.

CVE-2015-0113

2015-04-2711:59:03

CWE-200

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.002

Percentile

53.2%

JSON

The Jazz help system in IBM Rational Collaborative Lifecycle Management 4.0 through 5.0.2, Rational Quality Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Team Concert 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Requirements Composer 4.0 through 4.0.7, Rational DOORS Next Generation 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Engineering Lifecycle Manager 4.0.3 through 4.0.7 and 5.0 through 5.0.2, Rational Rhapsody Design Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, and Rational Software Architect Design Manager 4.0 through 4.0.7 and 5.0 through 5.0.2 allows remote attackers to read JSP source code via a crafted request.

Affected configurations

Nvd

Node

ibmrational_software_architect_design_managerMatch4.0.0

ibmrational_software_architect_design_managerMatch4.0.1

ibmrational_software_architect_design_managerMatch4.0.2

ibmrational_software_architect_design_managerMatch4.0.3

ibmrational_software_architect_design_managerMatch4.0.4

ibmrational_software_architect_design_managerMatch4.0.5

ibmrational_software_architect_design_managerMatch4.0.6

ibmrational_software_architect_design_managerMatch4.0.7

ibmrational_software_architect_design_managerMatch5.0

ibmrational_software_architect_design_managerMatch5.0.1

ibmrational_software_architect_design_managerMatch5.0.2

Node

ibmrational_team_concertMatch4.0

ibmrational_team_concertMatch4.0.0.1

ibmrational_team_concertMatch4.0.0.2

ibmrational_team_concertMatch4.0.1

ibmrational_team_concertMatch4.0.2

ibmrational_team_concertMatch4.0.3

ibmrational_team_concertMatch4.0.4

ibmrational_team_concertMatch4.0.5

ibmrational_team_concertMatch4.0.6

ibmrational_team_concertMatch4.0.7

ibmrational_team_concertMatch5.0.0

ibmrational_team_concertMatch5.0.1

ibmrational_team_concertMatch5.0.2

Node

ibmrational_rhapsody_design_managerMatch4.0

ibmrational_rhapsody_design_managerMatch4.0.1

ibmrational_rhapsody_design_managerMatch4.0.2

ibmrational_rhapsody_design_managerMatch4.0.3

ibmrational_rhapsody_design_managerMatch4.0.4

ibmrational_rhapsody_design_managerMatch4.0.5

ibmrational_rhapsody_design_managerMatch4.0.6

ibmrational_rhapsody_design_managerMatch4.0.7

ibmrational_rhapsody_design_managerMatch5.0

ibmrational_rhapsody_design_managerMatch5.0.1

ibmrational_rhapsody_design_managerMatch5.0.2

Node

ibmrational_collaborative_lifecycle_managementMatch4.0.0

ibmrational_collaborative_lifecycle_managementMatch4.0.1

ibmrational_collaborative_lifecycle_managementMatch4.0.2

ibmrational_collaborative_lifecycle_managementMatch4.0.3

ibmrational_collaborative_lifecycle_managementMatch4.0.4

ibmrational_collaborative_lifecycle_managementMatch4.0.5

ibmrational_collaborative_lifecycle_managementMatch4.0.6

ibmrational_collaborative_lifecycle_managementMatch4.0.7

ibmrational_collaborative_lifecycle_managementMatch5.0.0

ibmrational_collaborative_lifecycle_managementMatch5.0.1

ibmrational_collaborative_lifecycle_managementMatch5.0.2

Node

ibmrational_requirements_composerMatch4.0.0

ibmrational_requirements_composerMatch4.0.0.1

ibmrational_requirements_composerMatch4.0.0.2

ibmrational_requirements_composerMatch4.0.1

ibmrational_requirements_composerMatch4.0.2

ibmrational_requirements_composerMatch4.0.3

ibmrational_requirements_composerMatch4.0.4

ibmrational_requirements_composerMatch4.0.5

ibmrational_requirements_composerMatch4.0.6

ibmrational_requirements_composerMatch4.0.7

Node

ibmrational_doors_next_generationMatch4.0.0

ibmrational_doors_next_generationMatch4.0.1

ibmrational_doors_next_generationMatch4.0.2

ibmrational_doors_next_generationMatch4.0.3

ibmrational_doors_next_generationMatch4.0.4

ibmrational_doors_next_generationMatch4.0.5

ibmrational_doors_next_generationMatch4.0.6

ibmrational_doors_next_generationMatch4.0.7

ibmrational_doors_next_generationMatch5.0.1

ibmrational_doors_next_generationMatch5.0.2

Node

ibmrational_engineering_lifecycle_managerMatch4.0.3

ibmrational_engineering_lifecycle_managerMatch4.0.4

ibmrational_engineering_lifecycle_managerMatch4.0.5

ibmrational_engineering_lifecycle_managerMatch4.0.6

ibmrational_engineering_lifecycle_managerMatch4.0.7

ibmrational_engineering_lifecycle_managerMatch5.0

ibmrational_engineering_lifecycle_managerMatch5.0.1

ibmrational_engineering_lifecycle_managerMatch5.0.2

Node

ibmrational_quality_managerMatch4.0

ibmrational_quality_managerMatch4.0.0.1

ibmrational_quality_managerMatch4.0.0.2

ibmrational_quality_managerMatch4.0.1

ibmrational_quality_managerMatch4.0.2

ibmrational_quality_managerMatch4.0.3

ibmrational_quality_managerMatch4.0.4

ibmrational_quality_managerMatch4.0.5

ibmrational_quality_managerMatch4.0.7

ibmrational_quality_managerMatch5.0.0

ibmrational_quality_managerMatch5.0.1

ibmrational_quality_managerMatch5.0.2

VendorProductVersionCPE
ibmrational_software_architect_design_manager4.0.0cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.0:*:*:*:*:*:*:*
ibmrational_software_architect_design_manager4.0.1cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.1:*:*:*:*:*:*:*
ibmrational_software_architect_design_manager4.0.2cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.2:*:*:*:*:*:*:*
ibmrational_software_architect_design_manager4.0.3cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.3:*:*:*:*:*:*:*
ibmrational_software_architect_design_manager4.0.4cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.4:*:*:*:*:*:*:*
ibmrational_software_architect_design_manager4.0.5cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.5:*:*:*:*:*:*:*
ibmrational_software_architect_design_manager4.0.6cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.6:*:*:*:*:*:*:*
ibmrational_software_architect_design_manager4.0.7cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.7:*:*:*:*:*:*:*
ibmrational_software_architect_design_manager5.0cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0:*:*:*:*:*:*:*
ibmrational_software_architect_design_manager5.0.1cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	rational_software_architect_design_manager	4.0.0	cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.0:::::::*
ibm	rational_software_architect_design_manager	4.0.1	cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.1:::::::*
ibm	rational_software_architect_design_manager	4.0.2	cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.2:::::::*
ibm	rational_software_architect_design_manager	4.0.3	cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.3:::::::*
ibm	rational_software_architect_design_manager	4.0.4	cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.4:::::::*
ibm	rational_software_architect_design_manager	4.0.5	cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.5:::::::*
ibm	rational_software_architect_design_manager	4.0.6	cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.6:::::::*
ibm	rational_software_architect_design_manager	4.0.7	cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.7:::::::*
ibm	rational_software_architect_design_manager	5.0	cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0:::::::*
ibm	rational_software_architect_design_manager	5.0.1	cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:::::::*