CVE-2015-0113
The Jazz help system in IBM Rational Collaborative Lifecycle Management 4.0 through 5.0.2, Rational Quality Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Team Concert 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Requirements Composer 4.0 through 4.0.7, Rational DOORS Next Generation 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Engineering Lifecycle Manager 4.0.3 through 4.0.7 and 5.0 through 5.0.2, Rational Rhapsody Design Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, and Rational Software Architect Design Manager 4.0 through 4.0.7 and 5.0 through 5.0.2 allows remote attackers to read JSP source code via a crafted request.
Published:Apr 27, 2015
Last Modified:Apr 12, 2025
EPS:Apr 27, 2015
EPSS Score:0.00362
CVSS Score:5
Affected Products
Vendor
Product
Action
Vendor
Ibm
Product
Rational Collaborative Lifecycle Management
Ibm
Rational Collaborative Lifecycle Management
Vendor
Ibm
Product
Rational Doors Next Generation
Ibm
Rational Doors Next Generation
Vendor
Ibm
Product
Rational Engineering Lifecycle Manager
Ibm
Rational Engineering Lifecycle Manager
Vendor
Ibm
Product
Rational Quality Manager
Ibm
Rational Quality Manager
Vendor
Ibm
Product
Rational Requirements Composer
Ibm
Rational Requirements Composer
Vendor
Ibm
Product
Rational Rhapsody Design Manager
Ibm
Rational Rhapsody Design Manager
Vendor
Ibm
Product
Rational Software Architect Design Manager
Ibm
Rational Software Architect Design Manager
Vendor
Ibm
Product
Rational Team Concert
Ibm
Rational Team Concert
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
