Lucene search

[email protected]NVD:CVE-2016-0284

HistoryNov 24, 2016 - 7:59 p.m.

CVE-2016-0284

2016-11-2419:59:04

CWE-611

[email protected]

web.nvd.nist.gov

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:N/A:P

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

43.9%

JSON

The XML parser in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational DOORS Next Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5 allows remote authenticated users to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Affected configurations

Nvd

Node

ibmrational_software_architect_design_managerMatch4.0.0

ibmrational_software_architect_design_managerMatch4.0.1

ibmrational_software_architect_design_managerMatch4.0.2

ibmrational_software_architect_design_managerMatch4.0.3

ibmrational_software_architect_design_managerMatch4.0.4

ibmrational_software_architect_design_managerMatch4.0.5

ibmrational_software_architect_design_managerMatch4.0.6

ibmrational_software_architect_design_managerMatch4.0.7

ibmrational_software_architect_design_managerMatch5.0.0

ibmrational_software_architect_design_managerMatch5.0.1

ibmrational_software_architect_design_managerMatch5.0.2

ibmrational_software_architect_design_managerMatch6.0.0

ibmrational_software_architect_design_managerMatch6.0.1

ibmrational_software_architect_design_managerMatch6.0.2

Node

ibmrational_collaborative_lifecycle_managementMatch3.0.1.6

ibmrational_collaborative_lifecycle_managementMatch4.0.0

ibmrational_collaborative_lifecycle_managementMatch4.0.1

ibmrational_collaborative_lifecycle_managementMatch4.0.2

ibmrational_collaborative_lifecycle_managementMatch4.0.3

ibmrational_collaborative_lifecycle_managementMatch4.0.4

ibmrational_collaborative_lifecycle_managementMatch4.0.5

ibmrational_collaborative_lifecycle_managementMatch4.0.6

ibmrational_collaborative_lifecycle_managementMatch4.0.7

ibmrational_collaborative_lifecycle_managementMatch5.0.0

ibmrational_collaborative_lifecycle_managementMatch5.0.1

ibmrational_collaborative_lifecycle_managementMatch5.0.2

ibmrational_collaborative_lifecycle_managementMatch6.0.0

ibmrational_collaborative_lifecycle_managementMatch6.0.1

ibmrational_collaborative_lifecycle_managementMatch6.0.2

Node

ibmrational_team_concertMatch3.0.1.6

ibmrational_team_concertMatch4.0.0

ibmrational_team_concertMatch4.0.1

ibmrational_team_concertMatch4.0.2

ibmrational_team_concertMatch4.0.3

ibmrational_team_concertMatch4.0.4

ibmrational_team_concertMatch4.0.5

ibmrational_team_concertMatch4.0.6

ibmrational_team_concertMatch4.0.7

ibmrational_team_concertMatch5.0.0

ibmrational_team_concertMatch5.0.1

ibmrational_team_concertMatch5.0.2

ibmrational_team_concertMatch6.0.0

ibmrational_team_concertMatch6.0.1

ibmrational_team_concertMatch6.0.2

Node

ibmrational_quality_managerMatch3.0.1.6

ibmrational_quality_managerMatch4.0.0

ibmrational_quality_managerMatch4.0.1

ibmrational_quality_managerMatch4.0.2

ibmrational_quality_managerMatch4.0.3

ibmrational_quality_managerMatch4.0.4

ibmrational_quality_managerMatch4.0.5

ibmrational_quality_managerMatch4.0.6

ibmrational_quality_managerMatch4.0.7

ibmrational_quality_managerMatch5.0.0

ibmrational_quality_managerMatch5.0.1

ibmrational_quality_managerMatch5.0.2

ibmrational_quality_managerMatch6.0.0

ibmrational_quality_managerMatch6.0.1

ibmrational_quality_managerMatch6.0.2

Node

ibmrational_doors_next_generationMatch4.0.0

ibmrational_doors_next_generationMatch4.0.1

ibmrational_doors_next_generationMatch4.0.2

ibmrational_doors_next_generationMatch4.0.3

ibmrational_doors_next_generationMatch4.0.4

ibmrational_doors_next_generationMatch4.0.5

ibmrational_doors_next_generationMatch4.0.6

ibmrational_doors_next_generationMatch4.0.7

ibmrational_doors_next_generationMatch5.0.0

ibmrational_doors_next_generationMatch5.0.1

ibmrational_doors_next_generationMatch5.0.2

ibmrational_doors_next_generationMatch6.0.0

ibmrational_doors_next_generationMatch6.0.1

ibmrational_doors_next_generationMatch6.0.2

Node

ibmrational_engineering_lifecycle_managerMatch4.0.0

ibmrational_engineering_lifecycle_managerMatch4.0.1

ibmrational_engineering_lifecycle_managerMatch4.0.2

ibmrational_engineering_lifecycle_managerMatch4.0.3

ibmrational_engineering_lifecycle_managerMatch4.0.4

ibmrational_engineering_lifecycle_managerMatch4.0.5

ibmrational_engineering_lifecycle_managerMatch4.0.6

ibmrational_engineering_lifecycle_managerMatch4.0.7

ibmrational_engineering_lifecycle_managerMatch5.0.0

ibmrational_engineering_lifecycle_managerMatch5.0.1

ibmrational_engineering_lifecycle_managerMatch5.0.2

ibmrational_engineering_lifecycle_managerMatch6.0.0

ibmrational_engineering_lifecycle_managerMatch6.0.1

ibmrational_engineering_lifecycle_managerMatch6.0.2

Node

ibmrational_rhapsody_design_managerMatch4.0

ibmrational_rhapsody_design_managerMatch4.0.1

ibmrational_rhapsody_design_managerMatch4.0.2

ibmrational_rhapsody_design_managerMatch4.0.3

ibmrational_rhapsody_design_managerMatch4.0.4

ibmrational_rhapsody_design_managerMatch4.0.5

ibmrational_rhapsody_design_managerMatch4.0.6

ibmrational_rhapsody_design_managerMatch4.0.7

ibmrational_rhapsody_design_managerMatch5.0.0

ibmrational_rhapsody_design_managerMatch5.0.1

ibmrational_rhapsody_design_managerMatch5.0.2

ibmrational_rhapsody_design_managerMatch6.0.0

ibmrational_rhapsody_design_managerMatch6.0.1

ibmrational_rhapsody_design_managerMatch6.0.2

VendorProductVersionCPE
ibmrational_software_architect_design_manager4.0.0cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.0:*:*:*:*:*:*:*
ibmrational_software_architect_design_manager4.0.1cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.1:*:*:*:*:*:*:*
ibmrational_software_architect_design_manager4.0.2cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.2:*:*:*:*:*:*:*
ibmrational_software_architect_design_manager4.0.3cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.3:*:*:*:*:*:*:*
ibmrational_software_architect_design_manager4.0.4cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.4:*:*:*:*:*:*:*
ibmrational_software_architect_design_manager4.0.5cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.5:*:*:*:*:*:*:*
ibmrational_software_architect_design_manager4.0.6cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.6:*:*:*:*:*:*:*
ibmrational_software_architect_design_manager4.0.7cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.7:*:*:*:*:*:*:*
ibmrational_software_architect_design_manager5.0.0cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.0:*:*:*:*:*:*:*
ibmrational_software_architect_design_manager5.0.1cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	rational_software_architect_design_manager	4.0.0	cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.0:::::::*
ibm	rational_software_architect_design_manager	4.0.1	cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.1:::::::*
ibm	rational_software_architect_design_manager	4.0.2	cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.2:::::::*
ibm	rational_software_architect_design_manager	4.0.3	cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.3:::::::*
ibm	rational_software_architect_design_manager	4.0.4	cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.4:::::::*
ibm	rational_software_architect_design_manager	4.0.5	cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.5:::::::*
ibm	rational_software_architect_design_manager	4.0.6	cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.6:::::::*
ibm	rational_software_architect_design_manager	4.0.7	cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.7:::::::*
ibm	rational_software_architect_design_manager	5.0.0	cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.0:::::::*
ibm	rational_software_architect_design_manager	5.0.1	cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:::::::*

Rows per page:

1-10 of 1011

References

www-01.ibm.com/support/docview.wss?uid=swg21991478

www.securityfocus.com/bid/94555

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:N/A:P

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

43.9%

JSON

Related for NVD:CVE-2016-0284

cvelist1 prion1 cve1 ibm1