Vulnerability in IBM Rational Doors Next Generation
CVE-2015-0121
IBM Rational Requirements Composer 3.0 through 3.0.1.6 and 4.0 through 4.0.7 and Rational DOORS Next Generation (RDNG) 4.0 through 4.0.7 and 5.0 through 5.0.2, when LTPA single sign on is used with WebSphere Application Server, do not terminate a Requirements Management (RM) session upon LTPA token expiration, which allows remote attackers to obtain access by leveraging an unattended workstation.
EPSS: 0.004 (35.8th percentile) — read the EPSS interpretation.
Affected products
- Ibm Rational_doors_next_generation — versions 4.0.0, 4.0.1, 4.0.2
- Ibm Rational_requirements_composer — versions 3.0, 3.0.1, 3.0.1.1
- N/a — versions n/a
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (vdb-entry, x_refsource_BID)