Lucene search

[email protected]NVD:CVE-2015-7449

HistoryMar 20, 2018 - 9:29 p.m.

CVE-2015-7449

2018-03-2021:29:00

CWE-200

CWE-326

[email protected]

web.nvd.nist.gov

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

3.3

Confidence

High

EPSS

Percentile

5.1%

JSON

IBM Rational Collaborative Lifecycle Management (CLM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Quality Manager (RQM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Team Concert (RTC) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Requirements Composer (RRC) 4.0.x before 4.0.7 iFix10; Rational DOORS Next Generation (RDNG) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Engineering Lifecycle Manager (RELM) 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.0.7 before iFix1, 5.0.x before 5.0.2 iFix1, and 6.0.x before 6.0.2; Rational Rhapsody Design Manager (Rhapsody DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Software Architect Design Manager (RSA DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2 allow local users to obtain sensitive information by leveraging weak encryption. IBM X-Force ID: 108221.

Affected configurations

Nvd

Node

ibmrational_collaborative_lifecycle_managementRange4.0.0–6.0.2

Node

ibmrational_quality_managerRange4.0.0–4.0.7

ibmrational_quality_managerMatch5.0.0

ibmrational_quality_managerMatch5.0.1

ibmrational_quality_managerMatch5.0.2

ibmrational_quality_managerMatch6.0.0

ibmrational_quality_managerMatch6.0.1

ibmrational_quality_managerMatch6.0.2

Node

ibmrational_team_concertRange4.0.0–4.0.7

ibmrational_team_concertMatch5.0.0

ibmrational_team_concertMatch5.0.1

ibmrational_team_concertMatch5.0.2

ibmrational_team_concertMatch6.0.0

ibmrational_team_concertMatch6.0.1

ibmrational_team_concertMatch6.0.2

Node

ibmrational_requirements_composerRange4.0.0–4.0.7

Node

ibmrational_doors_next_generationRange4.0.0–4.0.7

ibmrational_doors_next_generationMatch5.0.0

ibmrational_doors_next_generationMatch5.0.1

ibmrational_doors_next_generationMatch5.0.2

ibmrational_doors_next_generationMatch6.0.0

ibmrational_doors_next_generationMatch6.0.1

ibmrational_doors_next_generationMatch6.0.2

Node

ibmrational_engineering_lifecycle_managerRange4.0.3–4.0.7

ibmrational_engineering_lifecycle_managerMatch5.0.0

ibmrational_engineering_lifecycle_managerMatch5.0.1

ibmrational_engineering_lifecycle_managerMatch5.0.2

ibmrational_engineering_lifecycle_managerMatch6.0.0

ibmrational_engineering_lifecycle_managerMatch6.0.1

ibmrational_engineering_lifecycle_managerMatch6.0.2

Node

ibmrational_rhapsody_design_managerRange4.0–4.0.7

ibmrational_rhapsody_design_managerMatch5.0.0

ibmrational_rhapsody_design_managerMatch5.0.1

ibmrational_rhapsody_design_managerMatch5.0.2

ibmrational_rhapsody_design_managerMatch6.0.0

ibmrational_rhapsody_design_managerMatch6.0.1

ibmrational_rhapsody_design_managerMatch6.0.2

Node

ibmrational_software_architect_design_managerRange4.0.0–4.0.7

ibmrational_software_architect_design_managerMatch5.0.0

ibmrational_software_architect_design_managerMatch5.0.1

ibmrational_software_architect_design_managerMatch5.0.2

ibmrational_software_architect_design_managerMatch6.0.0

ibmrational_software_architect_design_managerMatch6.0.1

ibmrational_software_architect_design_managerMatch6.0.2

VendorProductVersionCPE
ibmrational_collaborative_lifecycle_management*cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*
ibmrational_quality_manager*cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*
ibmrational_quality_manager5.0.0cpe:2.3:a:ibm:rational_quality_manager:5.0.0:*:*:*:*:*:*:*
ibmrational_quality_manager5.0.1cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*
ibmrational_quality_manager5.0.2cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*
ibmrational_quality_manager6.0.0cpe:2.3:a:ibm:rational_quality_manager:6.0.0:*:*:*:*:*:*:*
ibmrational_quality_manager6.0.1cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*
ibmrational_quality_manager6.0.2cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*
ibmrational_team_concert*cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*
ibmrational_team_concert5.0.0cpe:2.3:a:ibm:rational_team_concert:5.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	rational_collaborative_lifecycle_management	*	cpe:2.3:a:ibm:rational_collaborative_lifecycle_management::::::::
ibm	rational_quality_manager	*	cpe:2.3:a:ibm:rational_quality_manager::::::::
ibm	rational_quality_manager	5.0.0	cpe:2.3:a:ibm:rational_quality_manager:5.0.0:::::::*
ibm	rational_quality_manager	5.0.1	cpe:2.3:a:ibm:rational_quality_manager:5.0.1:::::::*
ibm	rational_quality_manager	5.0.2	cpe:2.3:a:ibm:rational_quality_manager:5.0.2:::::::*
ibm	rational_quality_manager	6.0.0	cpe:2.3:a:ibm:rational_quality_manager:6.0.0:::::::*
ibm	rational_quality_manager	6.0.1	cpe:2.3:a:ibm:rational_quality_manager:6.0.1:::::::*
ibm	rational_quality_manager	6.0.2	cpe:2.3:a:ibm:rational_quality_manager:6.0.2:::::::*
ibm	rational_team_concert	*	cpe:2.3:a:ibm:rational_team_concert::::::::
ibm	rational_team_concert	5.0.0	cpe:2.3:a:ibm:rational_team_concert:5.0.0:::::::*

Rows per page:

1-10 of 441

References

www-01.ibm.com/support/docview.wss?uid=swg21985143

exchange.xforce.ibmcloud.com/vulnerabilities/108221

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

3.3

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2015-7449

cvelist1 prion1 ibm1 cve1