Description
IBM Rational Requirements Composer 3.0 through 3.0.1.6 and 4.0 through 4.0.7 and Rational DOORS Next Generation (RDNG) 4.0 through 4.0.7 and 5.0 through 5.0.2, when LTPA single sign on is used with WebSphere Application Server, do not terminate a Requirements Management (RM) session upon LTPA token expiration, which allows remote attackers to obtain access by leveraging an unattended workstation.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21903761
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/74910
Scores
EPSS
0.0044
EPSS Percentile
35.7%
Details
Status
published
Products (30)
ibm/rational_doors_next_generation
4.0.0
ibm/rational_doors_next_generation
4.0.1
ibm/rational_doors_next_generation
4.0.2
ibm/rational_doors_next_generation
4.0.3
ibm/rational_doors_next_generation
4.0.4
ibm/rational_doors_next_generation
4.0.5
ibm/rational_doors_next_generation
4.0.6
ibm/rational_doors_next_generation
4.0.7
ibm/rational_doors_next_generation
5.0
ibm/rational_doors_next_generation
5.0.1
... and 20 more
Published
May 30, 2015
Tracked Since
Feb 18, 2026