NetSight
low3.3

CVE-2015-7449

IBM Rational Collaborative Lifecycle Management (CLM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; R…

Impact

IBM Rational Collaborative Lifecycle Management (CLM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Quality Manager (RQM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Team Concert (RTC) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Requirements Composer (RRC) 4.0.x before 4.0.7 iFix10; Rational DOORS Next Generation (RDNG) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Engineering Lifecycle Manager (RELM) 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.0.7 before iFix1, 5.0.x before 5.0.2 iFix1, and 6.0.x before 6.0.2; Rational Rhapsody Design Manager (Rhapsody DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Software Architect Design Manager (RSA DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2 allow local users to obtain sensitive information by leveraging weak encryption. IBM X-Force ID: 108221.

Affected products

VendorProductAffected versions
IbmRational Collaborative Lifecycle Management
from 4.0.0 through 6.0.2
IbmRational Quality Manager
from 4.0.0 through 4.0.7
Versions 5.0.0, 5.0.1, 5.0.2, 6.0.0, 6.0.1
IbmRational Team Concert
from 4.0.0 through 4.0.7
Versions 5.0.0, 5.0.1, 5.0.2, 6.0.0, 6.0.1
IbmRational Requirements Composer
from 4.0.0 through 4.0.7
IbmRational Doors Next Generation
from 4.0.0 through 4.0.7
Versions 5.0.0, 5.0.1, 5.0.2, 6.0.0, 6.0.1
IbmRational Engineering Lifecycle Manager
from 4.0.3 through 4.0.7
Versions 5.0.0, 5.0.1, 5.0.2, 6.0.0, 6.0.1
IbmRational Rhapsody Design Manager
from 4.0 through 4.0.7
Versions 5.0.0, 5.0.1, 5.0.2, 6.0.0, 6.0.1
IbmRational Software Architect Design Manager
from 4.0.0 through 4.0.7
Versions 5.0.0, 5.0.1, 5.0.2, 6.0.0, 6.0.1

Weakness classification

References