CVE-2016-8973

MEDIUM

IBM Rhapsody DM <6.0 - Privilege Escalation

Title source: llm

Description

IBM Rhapsody DM 4.0, 5.0 and 6.0 contains an undisclosed vulnerability that may allow an authenticated user to upload infected malicious files to the server. IBM Reference #: 1999960.

References (2)

Scores

CVSS v3 4.3
EPSS 0.0019
EPSS Percentile 40.7%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Classification

CWE
CWE-434
Status published

Affected Products (32)

ibm/rational_rhapsody_design_manager
ibm/rational_rhapsody_design_manager
ibm/rational_rhapsody_design_manager
ibm/rational_rhapsody_design_manager
ibm/rational_rhapsody_design_manager
ibm/rational_rhapsody_design_manager
ibm/rational_rhapsody_design_manager
ibm/rational_rhapsody_design_manager
ibm/rational_rhapsody_design_manager
ibm/rational_rhapsody_design_manager
ibm/rational_rhapsody_design_manager
ibm/rational_rhapsody_design_manager
ibm/rational_rhapsody_design_manager
ibm/rational_rhapsody_design_manager
IBM Corporation/Rational Rhapsody Design Manager < 4.0.2
... and 17 more

Timeline

Published Mar 20, 2017
Tracked Since Feb 18, 2026