Improper input validation in IBM Rational Doors Next Generation
CVE-2014-0845
Open redirect vulnerability in IBM Rational Requirements Composer 3.x before 3.0.1.6 iFix2 and 4.x before 4.0.6, and Rational DOORS Next Generation 4.x before 4.0.6, allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.010 (57.7th percentile) — read the EPSS interpretation.
Affected products
- Ibm Rational_doors_next_generation — versions 4.0.0, 4.0.1, 4.0.2
- Ibm Rational_requirements_composer — versions 3.0.1, 3.0.1.1, 3.0.1.2
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)
- psirt@us.ibm.com (vdb-entry, x_refsource_BID)