CVE-2014-0845

Published: Mar 4, 2014Modified: Apr 29, 2026

4.9

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:N

Exploitability: 6.8 / Impact: 4.9

Source: NVD

Description

Open redirect vulnerability in IBM Rational Requirements Composer 3.x before 3.0.1.6 iFix2 and 4.x before 4.0.6, and Rational DOORS Next Generation 4.x before 4.0.6, allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.

Affected (21)

Products: Ibm: Rational Requirements Composer, Rational Doors Next Generation

Ibm

2 products

Rational Requirements Composer

Rational Doors Next Generation

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Requirements Composer	Version 3.0.1.1
Ibm Rational Requirements Composer	Version 3.0.1.2
Ibm Rational Requirements Composer	Version 3.0.1.3
Ibm Rational Requirements Composer	Version 3.0.1.4
Ibm Rational Requirements Composer	Version 3.0.1.5
Ibm Rational Requirements Composer	Version 3.0.1.6
Ibm Rational Requirements Composer	Version 3.0.1
Ibm Rational Requirements Composer	Version 4.0.0.1
Ibm Rational Requirements Composer	Version 4.0.0.2
Ibm Rational Requirements Composer	Version 4.0.0
Ibm Rational Requirements Composer	Version 4.0.1
Ibm Rational Requirements Composer	Version 4.0.2
Ibm Rational Requirements Composer	Version 4.0.3
Ibm Rational Requirements Composer	Version 4.0.4
Ibm Rational Requirements Composer	Version 4.0.5

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Doors Next Generation	Version 4.0.0
Ibm Rational Doors Next Generation	Version 4.0.1
Ibm Rational Doors Next Generation	Version 4.0.2
Ibm Rational Doors Next Generation	Version 4.0.3
Ibm Rational Doors Next Generation	Version 4.0.4
Ibm Rational Doors Next Generation	Version 4.0.5