CVE-2015-0121
Severity Score
3.7
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
IBM Rational Requirements Composer 3.0 through 3.0.1.6 and 4.0 through 4.0.7 and Rational DOORS Next Generation (RDNG) 4.0 through 4.0.7 and 5.0 through 5.0.2, when LTPA single sign on is used with WebSphere Application Server, do not terminate a Requirements Management (RM) session upon LTPA token expiration, which allows remote attackers to obtain access by leveraging an unattended workstation.
IBM Rational Requirements Composer 3.0 hasta 3.0.1.6 y 4.0 hasta 4.0.7 y Rational DOORS Next Generation (RDNG) 4.0 hasta 4.0.7 y 5.0 hasta 5.0.2, cuando el 'Single Sign On' de LTPA está utilizado con WebSphere Application Server, no terminan una sesión de Requirements Management (RM) cuando caduca el token LTPA, lo que permite a atacantes remotos obtener el acceso mediante el aprovechamiento de una estación de trabajo desatendida.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-11-18 CVE Reserved
- 2015-05-30 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/74910 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg21903761 | 2016-12-03 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ibm Search vendor "Ibm" | Rational Requirements Composer Search vendor "Ibm" for product "Rational Requirements Composer" | 3.0 Search vendor "Ibm" for product "Rational Requirements Composer" and version "3.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Requirements Composer Search vendor "Ibm" for product "Rational Requirements Composer" | 3.0.1 Search vendor "Ibm" for product "Rational Requirements Composer" and version "3.0.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Requirements Composer Search vendor "Ibm" for product "Rational Requirements Composer" | 3.0.1.1 Search vendor "Ibm" for product "Rational Requirements Composer" and version "3.0.1.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Requirements Composer Search vendor "Ibm" for product "Rational Requirements Composer" | 3.0.1.2 Search vendor "Ibm" for product "Rational Requirements Composer" and version "3.0.1.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Requirements Composer Search vendor "Ibm" for product "Rational Requirements Composer" | 3.0.1.3 Search vendor "Ibm" for product "Rational Requirements Composer" and version "3.0.1.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Requirements Composer Search vendor "Ibm" for product "Rational Requirements Composer" | 3.0.1.4 Search vendor "Ibm" for product "Rational Requirements Composer" and version "3.0.1.4" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Requirements Composer Search vendor "Ibm" for product "Rational Requirements Composer" | 3.0.1.5 Search vendor "Ibm" for product "Rational Requirements Composer" and version "3.0.1.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Requirements Composer Search vendor "Ibm" for product "Rational Requirements Composer" | 3.0.1.6 Search vendor "Ibm" for product "Rational Requirements Composer" and version "3.0.1.6" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Requirements Composer Search vendor "Ibm" for product "Rational Requirements Composer" | 4.0 Search vendor "Ibm" for product "Rational Requirements Composer" and version "4.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Requirements Composer Search vendor "Ibm" for product "Rational Requirements Composer" | 4.0.0 Search vendor "Ibm" for product "Rational Requirements Composer" and version "4.0.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Requirements Composer Search vendor "Ibm" for product "Rational Requirements Composer" | 4.0.0.1 Search vendor "Ibm" for product "Rational Requirements Composer" and version "4.0.0.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Requirements Composer Search vendor "Ibm" for product "Rational Requirements Composer" | 4.0.0.2 Search vendor "Ibm" for product "Rational Requirements Composer" and version "4.0.0.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Requirements Composer Search vendor "Ibm" for product "Rational Requirements Composer" | 4.0.1 Search vendor "Ibm" for product "Rational Requirements Composer" and version "4.0.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Requirements Composer Search vendor "Ibm" for product "Rational Requirements Composer" | 4.0.2 Search vendor "Ibm" for product "Rational Requirements Composer" and version "4.0.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Requirements Composer Search vendor "Ibm" for product "Rational Requirements Composer" | 4.0.3 Search vendor "Ibm" for product "Rational Requirements Composer" and version "4.0.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Requirements Composer Search vendor "Ibm" for product "Rational Requirements Composer" | 4.0.4 Search vendor "Ibm" for product "Rational Requirements Composer" and version "4.0.4" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Requirements Composer Search vendor "Ibm" for product "Rational Requirements Composer" | 4.0.5 Search vendor "Ibm" for product "Rational Requirements Composer" and version "4.0.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Requirements Composer Search vendor "Ibm" for product "Rational Requirements Composer" | 4.0.6 Search vendor "Ibm" for product "Rational Requirements Composer" and version "4.0.6" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Requirements Composer Search vendor "Ibm" for product "Rational Requirements Composer" | 4.0.7 Search vendor "Ibm" for product "Rational Requirements Composer" and version "4.0.7" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Doors Next Generation Search vendor "Ibm" for product "Rational Doors Next Generation" | 4.0.0 Search vendor "Ibm" for product "Rational Doors Next Generation" and version "4.0.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Doors Next Generation Search vendor "Ibm" for product "Rational Doors Next Generation" | 4.0.1 Search vendor "Ibm" for product "Rational Doors Next Generation" and version "4.0.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Doors Next Generation Search vendor "Ibm" for product "Rational Doors Next Generation" | 4.0.2 Search vendor "Ibm" for product "Rational Doors Next Generation" and version "4.0.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Doors Next Generation Search vendor "Ibm" for product "Rational Doors Next Generation" | 4.0.3 Search vendor "Ibm" for product "Rational Doors Next Generation" and version "4.0.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Doors Next Generation Search vendor "Ibm" for product "Rational Doors Next Generation" | 4.0.4 Search vendor "Ibm" for product "Rational Doors Next Generation" and version "4.0.4" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Doors Next Generation Search vendor "Ibm" for product "Rational Doors Next Generation" | 4.0.5 Search vendor "Ibm" for product "Rational Doors Next Generation" and version "4.0.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Doors Next Generation Search vendor "Ibm" for product "Rational Doors Next Generation" | 4.0.6 Search vendor "Ibm" for product "Rational Doors Next Generation" and version "4.0.6" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Doors Next Generation Search vendor "Ibm" for product "Rational Doors Next Generation" | 4.0.7 Search vendor "Ibm" for product "Rational Doors Next Generation" and version "4.0.7" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Doors Next Generation Search vendor "Ibm" for product "Rational Doors Next Generation" | 5.0 Search vendor "Ibm" for product "Rational Doors Next Generation" and version "5.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Doors Next Generation Search vendor "Ibm" for product "Rational Doors Next Generation" | 5.0.1 Search vendor "Ibm" for product "Rational Doors Next Generation" and version "5.0.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Rational Doors Next Generation Search vendor "Ibm" for product "Rational Doors Next Generation" | 5.0.2 Search vendor "Ibm" for product "Rational Doors Next Generation" and version "5.0.2" | - |
Affected
| ||||||