medium6.5
CVE-2016-0219
XML external entity (XXE) vulnerability in IBM Rational Team Concert 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, …
Impact
XML external entity (XXE) vulnerability in IBM Rational Team Concert 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1 iFix4 allows remote authenticated users to cause a denial of service via crafted XML data. IBM X-Force ID: 109693.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Rational Quality Manager | Versions 3.0, 3.0.1, 3.0.1.1, 3.0.1.2, 3.0.1.3, 3.0.1.4 |
| Ibm | Rational Requirements Composer | Versions 3.0, 3.0.1, 3.0.1.1, 3.0.1.2, 3.0.1.3, 3.0.1.4 |
| Ibm | Rational Doors Next Generation | Versions 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5 |
| Ibm | Rational Team Concert | Versions 3.0, 3.0.1, 3.0.1.1, 3.0.1.2, 3.0.1.3, 3.0.1.4 |
| Ibm | Rational Collaborative Lifecycle Management | Versions 3.0.1, 3.0.1.1, 3.0.1.2, 3.0.1.3, 3.0.1.4, 3.0.1.5 |
| Ibm | Rational Engineering Lifecycle Manager | Versions 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.0.7, 5.0 |
| Ibm | Rational Rhapsody Design Manager | Versions 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5 |
| Ibm | Rational Software Architect Design Manager | Versions 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5 |