Description
Directory traversal vulnerability in the server in IBM Rational Software Architect Design Manager and Rhapsody Design Manager 3.x and 4.x before 4.0.5 allows local users to read arbitrary files via vectors involving temporary files.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/84768
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21655724
Scores
EPSS
0.0062
EPSS Percentile
45.1%
Details
CWE
CWE-22
Status
published
Products (16)
ibm/rational_software_architect_design_manager
3.0.0
ibm/rational_software_architect_design_manager
3.0.0.1
ibm/rational_software_architect_design_manager
3.0.1
ibm/rational_software_architect_design_manager
4.0.0
ibm/rational_software_architect_design_manager
4.0.1
ibm/rational_software_architect_design_manager
4.0.2
ibm/rational_software_architect_design_manager
4.0.3
ibm/rational_software_architect_design_manager
4.0.4
ibm/rhapsody_design_manager
3.0.0
ibm/rhapsody_design_manager
3.0.0.1
... and 6 more
Published
Dec 14, 2013
Tracked Since
Feb 18, 2026