3.7

CVE-2015-0121

IBM Rational Requirements Composer 3.0 through 3.0.1.6 and 4.0 through 4.0.7 and Rational DOORS Next Generation (RDNG) 4.0 through 4.0.7 and 5.0 through 5.0.2, when LTPA single sign on is used with WebSphere Application Server, do not terminate a Requirements Management (RM) session upon LTPA token expiration, which allows remote attackers to obtain access by leveraging an unattended workstation.

Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Rational Requirements Composer Version3.0.1.1
Ibm ≫ Rational Requirements Composer Version3.0.1.2
Ibm ≫ Rational Requirements Composer Version3.0.1.3
Ibm ≫ Rational Requirements Composer Version3.0.1.4
Ibm ≫ Rational Requirements Composer Version3.0.1.5
Ibm ≫ Rational Requirements Composer Version3.0.1.6
Ibm ≫ Rational Requirements Composer Version4.0.0.1
Ibm ≫ Rational Requirements Composer Version4.0.0.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.19% 0.383
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 3.7 1.9 6.4
AV:L/AC:H/Au:N/C:P/I:P/A:P