Security Bulletin: Vulnerability in Rational Software Architect Design Manager and Rhapsody Design Manager (CVE-2013-5459)

Summary

An unspecified vulnerability within IBM Rational Software Architect (RSA) Design Manager and Rational Rhapsody Design Manager may affect data integrity.

Vulnerability Details

| Subscribe to My Notifications to be notified of important product support alerts like this.

• Follow this link for more information (requires login with your IBM ID)
  —|—

CVE ID:CVE-2013-5459

**Description:******An unspecified vulnerability related to parameter checking may affect data integrity.

CVSS Base Score: 3.5 **CVSS Temporal Score:**See <https://exchange.xforce.ibmcloud.com/vulnerabilities/84773&gt; for the current score *CVSS Environmental Score:**Undefined CVSS Vector: (AV:N/AC:M/Au:S/C:N/I:P/A:N)

Affected Products and Versions

Rational Software Architect Design Manager versions 3.0, 3.0.0.1, 3.0.1, 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5

Rhapsody Design Manager versions 3.0, 3.0.0.1, 3.0.1, 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5

Remediation/Fixes

For Rational Software Architect Design Manager versions 3.0, 3.0.0.1, 3.0.1, 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5:

• Upgrade to Rational Software Architect Design Manager 4.0.6

For Rhapsody Design Manager versions 3.0, 3.0.0.1, 3.0.1, 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5:

• Upgrade to Rational Rhapsody Design Manager 4.0.6

For the 3.x releases of Rational Software Architect Design Manager and Rhapsody Design Manager, customers who cannot upgrade to 4.0.6, please contact IBM support for guidance.

Workarounds and Mitigations

None