high8.8
CVE-2016-0326
IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and …
Impact
IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1 ifix3 allow remote authenticated users to execute arbitrary OS commands via a crafted "HTML request."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Rational Collaborative Lifecycle Management | Versions 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5 |
| Ibm | Rational Quality Manager | Versions 3.0.1.6, 4.0, 4.0.0.1, 4.0.0.2, 4.0.1, 4.0.2 |