CVE-2014-3037

Published: Sep 10, 2014Modified: May 6, 2026

6.0

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability: 6.8 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in IBM Configuration Management Application (aka VVC) in IBM Rational Engineering Lifecycle Manager before 4.0.7 and 5.x before 5.0.1, Rational Software Architect Design Manager before 4.0.7 and 5.x before 5.0.1, and Rational Rhapsody Design Manager before 4.0.7 and 5.x before 5.0.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.

Affected (28)

Products: Ibm: Rational Rhapsody Design Manager, Rational Engineering Lifecycle Manager, Rational Software Architect Design Manager

Ibm

3 products

Rational Rhapsody Design Manager

Rational Engineering Lifecycle Manager

Rational Software Architect Design Manager

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Rhapsody Design Manager	Up to 4.0.6
Ibm Rational Rhapsody Design Manager	Version 3.0.0.1
Ibm Rational Rhapsody Design Manager	Version 3.0.1
Ibm Rational Rhapsody Design Manager	Version 3.0
Ibm Rational Rhapsody Design Manager	Version 4.0.1
Ibm Rational Rhapsody Design Manager	Version 4.0.2
Ibm Rational Rhapsody Design Manager	Version 4.0.3
Ibm Rational Rhapsody Design Manager	Version 4.0.4
Ibm Rational Rhapsody Design Manager	Version 4.0.5
Ibm Rational Rhapsody Design Manager	Version 4.0
Ibm Rational Rhapsody Design Manager	Version 5.0

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Engineering Lifecycle Manager	Up to 4.06
Ibm Rational Engineering Lifecycle Manager	Version 1.0.0.1
Ibm Rational Engineering Lifecycle Manager	Version 1.0
Ibm Rational Engineering Lifecycle Manager	Version 4.03
Ibm Rational Engineering Lifecycle Manager	Version 4.04
Ibm Rational Engineering Lifecycle Manager	Version 4.05
Ibm Rational Engineering Lifecycle Manager	Version 5.0

Configuration C

10 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Software Architect Design Manager	Up to 4.0.6
Ibm Rational Software Architect Design Manager	Version 3.0.0.1
Ibm Rational Software Architect Design Manager	Version 3.0
Ibm Rational Software Architect Design Manager	Version 4.0.0
Ibm Rational Software Architect Design Manager	Version 4.0.1
Ibm Rational Software Architect Design Manager	Version 4.0.2
Ibm Rational Software Architect Design Manager	Version 4.0.3
Ibm Rational Software Architect Design Manager	Version 4.0.4
Ibm Rational Software Architect Design Manager	Version 4.0.5
Ibm Rational Software Architect Design Manager	Version 5.0