CVE-2018-1606: Exposure of Sensitive Information to an Unauthorized Actor

IBM Jazz based applications IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Quality...

PT-2018-13396

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management versions 5.0 through 5.02 and 6.0 through 6.0.6 IBM Rational DOORS Next Generation versions 5.0 through 5.02 and 6.0 through 6.0.6 IBM Rational Engineering Lifecycle Manager versions 5.0 through...

Security Bulletin: Rational Software Architect Design Manager is vulnerable to cross-site scripting (CVE-2018-1400)

Summary RSA DM allowed injection of arbitrary JavaScript code into configuration names, which could later get executed during some configuration management operations. Vulnerability Details CVEID: CVE-2018-1400 DESCRIPTION: IBM Rhapsody DM is vulnerable to cross-site scripting. This vulnerability...

CVE-2018-1587: Exposure of Sensitive Information to an Unauthorized Actor

IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 could reveal technical error messages to allow an adversary to gain information about the application and database that could be...

CVE-2018-1535: Improper Neutralization of Input During Web Page Generation

IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus...

CVE-2018-1585: Improper Neutralization of Input During Web Page Generation

IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus...

PT-2018-13239

Name of the Vulnerable Software and Affected Versions IBM Rational Rhapsody Design Manager versions 5.0 through 5.0.2 IBM Rational Rhapsody Design Manager versions 6.0 through 6.0.5 IBM Rational Software Architect Design Manager versions 5.0 through 5.0.2 IBM Rational Software Architect Design...

PT-2018-12994

Name of the Vulnerable Software and Affected Versions IBM Rational Rhapsody Design Manager versions 5.0 through 5.0.2 and 6.0 through 6.0.5 IBM Rational Software Architect Design Manager versions 5.0 through 5.0.2 and 6.0 through 6.0.1 Description This issue allows users to embed arbitrary...

CVE-2018-1536: Improper Neutralization of Input During Web Page Generation

IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus...

PT-2018-12983

Name of the Vulnerable Software and Affected Versions IBM Rational Rhapsody Design Manager versions 5.0 through 5.0.2 IBM Rational Rhapsody Design Manager versions 6.0 through 6.0.5 IBM Rational Software Architect Design Manager versions 5.0 through 5.0.2 IBM Rational Software Architect Design...

PT-2018-13256

Name of the Vulnerable Software and Affected Versions IBM Rational Rhapsody Design Manager versions 5.0 through 5.0.2 IBM Rational Rhapsody Design Manager versions 6.0 through 6.0.5 IBM Rational Software Architect Design Manager versions 5.0 through 5.0.2 IBM Rational Software Architect Design...

Security Bulletin: Multiple vulnerabilities in certain services of IBM Rational Software Architect Design Manager

Summary A number of services in Rational Software Architect Design Manager were not sanitizing user input properly thus potentially allowing cross-site scripting, json hijacking, and HTML injection attacks. Vulnerability Details CVEID: CVE-2015-7485 DESCRIPTION: IBM Jazz technology based products...

Security Bulletin: Vulnerability in IBM Rational Software Architect Design Manager can allow denial of service attack (CVE-2016-8974, CVE-2016-9698)

Summary XML content of review comments and OSLC links can be altered to harm RSA DM server responsiveness. Vulnerability Details CVEID: CVE-2016-8974 Description: IBM Rhapsody DM is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A...

CVE-2015-7453: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Rational Collaborative Lifecycle Management CLM 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Quality Manager RQM 3.0.x before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x...

PT-2018-4422

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management CLM versions 3.0.1 through 3.0.1.6 iFix7 Interim Fix 1, versions 4.0.x through 4.0.7 iFix10, versions 5.0.x through 5.0.2 iFix15, and versions 6.0.x through 6.0.1 iFix4 IBM Rational Quality Manag...

CVE-2017-1245: Improper Neutralization of Input During Web Page Generation

IBM Rational Software Architect Design Manager 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

PT-2017-12559

Name of the Vulnerable Software and Affected Versions IBM Rational Software Architect Design Manager versions 5.0 through 6.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure...

PT-2016-5278

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management versions 4.0 through 4.0.7 before iFix11 IBM Rational Collaborative Lifecycle Management versions 5.0 through 5.0.2 before iFix19 IBM Rational Collaborative Lifecycle Management versions 6.0...

CVE-2016-0325: Improper Neutralization of Special Elements used in an OS Command

IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert...

PT-2014-5036

Name of the Vulnerable Software and Affected Versions IBM Configuration Management Application aka VVC versions prior to 4.0.7 and 5.x prior to 5.0.1 IBM Rational Engineering Lifecycle Manager versions prior to 4.0.7 and 5.x prior to 5.0.1 IBM Rational Software Architect Design Manager versions...