CVE-2015-1928

Опубликовано: 02 янв. 2016

Источник: nvd

CVSS3: 6.8

CVSS2: 3.5

EPSS Низкий

Описание

Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.x before 6.0.0 IF4; Rational Quality Manager (RQM) 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.0 before 6.0.0 IF4; Rational Team Concert (RTC) 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.0 before 6.0.0 IF4; Rational Requirements Composer (RRC) 3.x before 3.0.1.6 IF7 and 4.x before 4.0.7 IF9; Rational DOORS Next Generation (RDNG) 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.0 before 6.0.0 IF4; Rational Engineering Lifecycle Manager (RELM) 4.0.3 through 4.0.7, 5.0 through 5.0.2, and 6.0.0; Rational Rhapsody Design Manager (DM) 4.0 through 4.0.7, 5.0 through 5.0.2, and 6.0.0; and Rational Software Architect Design Manager (DM) 4.0 through 4.0.7, 5.0 through 5.0.2, and 6.0.0 allows remote authenticated users to conduct clickjacking attacks via a crafted web site.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:rational_quality_manager:2.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:3.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:3.0.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:3.0.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:3.0.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:3.0.1.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:3.0.1.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:3.0.1.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:ibm:rational_rhapsody_design_manager:3.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:3.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:ibm:rational_requirements_composer:2.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:2.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:2.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:2.0.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:2.0.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:3.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.7:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:1.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:1.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:a:ibm:rational_doors_next_generation:4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:5.0.2:*:*:*:*:*:*:*

Конфигурация 6

Одно из

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*

Конфигурация 7

Одно из

cpe:2.3:a:ibm:rational_software_architect_design_manager:3.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:3.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.2:*:*:*:*:*:*:*

Конфигурация 8

Одно из

cpe:2.3:a:ibm:rational_team_concert:2.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:2.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:2.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:3.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:3.0.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:3.0.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:3.0.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:3.0.1.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:3.0.1.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:3.0.1.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:5.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 53%

0.00303

Низкий

6.8 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-3ggw-j4v8-rwmq

CVSS3: 6.8

github

больше 3 лет назад

EPSS

Процентиль: 53%

0.00303

Низкий

6.8 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-20