CVE-2016-0219

Опубликовано: 16 янв. 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

XML external entity (XXE) vulnerability in IBM Rational Team Concert 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1 iFix4 allows remote authenticated users to cause a denial of service via crafted XML data. IBM X-Force ID: 109693.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21983720
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/109693
VDB Entry
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21983720
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/109693
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:rational_quality_manager:3.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:3.0.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:3.0.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:3.0.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:3.0.1.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:3.0.1.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:3.0.1.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:ibm:rational_requirements_composer:3.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.7:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:ibm:rational_doors_next_generation:4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:6.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:ibm:rational_team_concert:3.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:3.0.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:3.0.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:3.0.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:3.0.1.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:3.0.1.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:3.0.1.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:6.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:6.0.1:*:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*

Конфигурация 6

Одно из

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.1:*:*:*:*:*:*:*

Конфигурация 7

Одно из

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.1:*:*:*:*:*:*:*

Конфигурация 8

Одно из

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.00395

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-611

Связанные уязвимости

GHSA-j673-qxgg-6q9g

CVSS3: 6.5

github

больше 3 лет назад

EPSS

Процентиль: 60%

0.00395

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-611