Security Bulletin: Vulnerability in Rational Rhapsody Help System (CVE-2013-0599) affecting Rational Rhapsody and Rational Rhapsody Design Manager

Summary

A vulnerability in the IBM Eclipse Help System could allow a remote attacker to obtain sensitive information.

Vulnerability Details

| Subscribe to My Notifications to be notified of important product support alerts like this.

• Follow this link for more information (requires login with your IBM ID)
  —|—

CVE ID:CVE-2013-0599 **
Description: **A vulnerability in the IBM Eclipse Help System, used by Rational Rhapsody and****Rational Rhapsody Design Manager could allow a remote attacker to obtain sensitive information. A specially crafted URL could cause an error message to be returned in the browser that may contain sensitive information.
** **CVSS Base Score: 5 **CVSS Temporal Score:**See <https://exchange.xforce.ibmcloud.com/vulnerabilities/83613&gt; *CVSS Environmental Score:**Undefined **CVSS Vector: **(AV:N/AC:L/AU:N/C:P/I:N/A:N)

Affected Products and Versions

Versions 7.5 through 8.0.2 of Rational Rhapsody running on Microsoft Windows and Linux

Versions 3.0 through 4.0.2 of Rational Rhapsody Design Manager running on Microsoft Windows and Linux

Remediation/Fixes

Upgrade to one of the following:

• Rational Rhapsody 8.0.3
• Rational Rhapsody Fix Pack 4 (7.6.1.4) for 7.6.1
• Rational Rhapsody Design Manager 4.0.3

Workarounds and Mitigations

None