CVE-2018-1587

Опубликовано: 19 июл. 2018

Источник: nvd

CVSS3: 4.3

CVSS2: 4

EPSS Низкий

Описание

IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 could reveal technical error messages to allow an adversary to gain information about the application and database that could be used to conduct further attacks. IBM X-Force ID: 143500.

Ссылки

http://www.ibm.com/support/docview.wss?uid=ibm10716029
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/143500
VDB Entry
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=ibm10716029
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/143500
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*

Версия от 5.0 (включая) до 5.0.2 (включая)

cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*

Версия от 6.0 (включая) до 6.0.5 (включая)

cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*

Версия от 5.0 (включая) до 5.0.2 (включая)

cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*

Версия от 6.0 (включая) до 6.0.1 (включая)

EPSS

Процентиль: 36%

0.00151

Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-r5f8-2fjh-jh7c