← Back

CVE-2016-0219

nvd nist
Published: Jan 16, 2018Modified: Nov 21, 2024

JSON object

Loading...
6.5
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

XML external entity (XXE) vulnerability in IBM Rational Team Concert 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1 iFix4 allows remote authenticated users to cause a denial of service via crafted XML data. IBM X-Force ID: 109693.

Affected (130)

Ibm
8 products
Rational Quality Manager
Rational Requirements Composer
Rational Doors Next Generation
Rational Team Concert
Rational Collaborative Lifecycle Management
Rational Engineering Lifecycle Manager
Rational Rhapsody Design Manager
Rational Software Architect Design Manager
Configuration A
22 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Rational Quality Manager
Version 3.0.1.1
Rational Quality Manager
Version 3.0.1.2
Rational Quality Manager
Version 3.0.1.3
Rational Quality Manager
Version 3.0.1.4
Rational Quality Manager
Version 3.0.1.5
Rational Quality Manager
Version 3.0.1.6
Rational Quality Manager
Version 3.0.1
Rational Quality Manager
Version 3.0
Rational Quality Manager
Version 4.0.0.1
Rational Quality Manager
Version 4.0.0.2
Rational Quality Manager
Version 4.0.1
Rational Quality Manager
Version 4.0.2
Rational Quality Manager
Version 4.0.3
Rational Quality Manager
Version 4.0.4
Rational Quality Manager
Version 4.0.5
Rational Quality Manager
Version 4.0.7
Rational Quality Manager
Version 4.0
Rational Quality Manager
Version 5.0.1
Rational Quality Manager
Version 5.0.2
Rational Quality Manager
Version 5.0
Rational Quality Manager
Version 6.0.1
Rational Quality Manager
Version 6.0
Configuration B
16 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Rational Requirements Composer
Version 3.0.1.1
Rational Requirements Composer
Version 3.0.1.2
Rational Requirements Composer
Version 3.0.1.3
Rational Requirements Composer
Version 3.0.1.4
Rational Requirements Composer
Version 3.0.1.5
Rational Requirements Composer
Version 3.0.1.6
Rational Requirements Composer
Version 3.0.1
Rational Requirements Composer
Version 3.0
Rational Requirements Composer
Version 4.0.1
Rational Requirements Composer
Version 4.0.2
Rational Requirements Composer
Version 4.0.3
Rational Requirements Composer
Version 4.0.4
Rational Requirements Composer
Version 4.0.5
Rational Requirements Composer
Version 4.0.6
Rational Requirements Composer
Version 4.0.7
Rational Requirements Composer
Version 4.0
Configuration C
13 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Rational Doors Next Generation
Version 4.0.1
Rational Doors Next Generation
Version 4.0.2
Rational Doors Next Generation
Version 4.0.3
Rational Doors Next Generation
Version 4.0.4
Rational Doors Next Generation
Version 4.0.5
Rational Doors Next Generation
Version 4.0.6
Rational Doors Next Generation
Version 4.0.7
Rational Doors Next Generation
Version 4.0
Rational Doors Next Generation
Version 5.0.1
Rational Doors Next Generation
Version 5.0.2
Rational Doors Next Generation
Version 5.0
Rational Doors Next Generation
Version 6.0.1
Rational Doors Next Generation
Version 6.0
Configuration D
23 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Rational Team Concert
Version 3.0.1.1
Rational Team Concert
Version 3.0.1.2
Rational Team Concert
Version 3.0.1.3
Rational Team Concert
Version 3.0.1.4
Rational Team Concert
Version 3.0.1.5
Rational Team Concert
Version 3.0.1.6
Rational Team Concert
Version 3.0.1
Rational Team Concert
Version 3.0
Rational Team Concert
Version 4.0.0.1
Rational Team Concert
Version 4.0.0.2
Rational Team Concert
Version 4.0.1
Rational Team Concert
Version 4.0.2
Rational Team Concert
Version 4.0.3
Rational Team Concert
Version 4.0.4
Rational Team Concert
Version 4.0.5
Rational Team Concert
Version 4.0.6
Rational Team Concert
Version 4.0.7
Rational Team Concert
Version 4.0
Rational Team Concert
Version 5.0.1
Rational Team Concert
Version 5.0.2
Rational Team Concert
Version 5.0
Rational Team Concert
Version 6.0.1
Rational Team Concert
Version 6.0
Configuration E
20 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Rational Collaborative Lifecycle Management
Version 3.0.1.1
Rational Collaborative Lifecycle Management
Version 3.0.1.2
Rational Collaborative Lifecycle Management
Version 3.0.1.3
Rational Collaborative Lifecycle Management
Version 3.0.1.4
Rational Collaborative Lifecycle Management
Version 3.0.1.5
Rational Collaborative Lifecycle Management
Version 3.0.1.6
Rational Collaborative Lifecycle Management
Version 3.0.1
Rational Collaborative Lifecycle Management
Version 4.0.1
Rational Collaborative Lifecycle Management
Version 4.0.2
Rational Collaborative Lifecycle Management
Version 4.0.3
Rational Collaborative Lifecycle Management
Version 4.0.4
Rational Collaborative Lifecycle Management
Version 4.0.5
Rational Collaborative Lifecycle Management
Version 4.0.6
Rational Collaborative Lifecycle Management
Version 4.0.7
Rational Collaborative Lifecycle Management
Version 4.0
Rational Collaborative Lifecycle Management
Version 5.0.1
Rational Collaborative Lifecycle Management
Version 5.0.2
Rational Collaborative Lifecycle Management
Version 5.0
Rational Collaborative Lifecycle Management
Version 6.0.1
Rational Collaborative Lifecycle Management
Version 6.0
Configuration F
10 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Rational Engineering Lifecycle Manager
Version 4.0.3
Rational Engineering Lifecycle Manager
Version 4.0.4
Rational Engineering Lifecycle Manager
Version 4.0.5
Rational Engineering Lifecycle Manager
Version 4.0.6
Rational Engineering Lifecycle Manager
Version 4.0.7
Rational Engineering Lifecycle Manager
Version 5.0.1
Rational Engineering Lifecycle Manager
Version 5.0.2
Rational Engineering Lifecycle Manager
Version 5.0
Rational Engineering Lifecycle Manager
Version 6.0.1
Rational Engineering Lifecycle Manager
Version 6.0
Configuration G
13 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Rational Rhapsody Design Manager
Version 4.0.1
Rational Rhapsody Design Manager
Version 4.0.2
Rational Rhapsody Design Manager
Version 4.0.3
Rational Rhapsody Design Manager
Version 4.0.4
Rational Rhapsody Design Manager
Version 4.0.5
Rational Rhapsody Design Manager
Version 4.0.6
Rational Rhapsody Design Manager
Version 4.0.7
Rational Rhapsody Design Manager
Version 4.0
Rational Rhapsody Design Manager
Version 5.0.1
Rational Rhapsody Design Manager
Version 5.0.2
Rational Rhapsody Design Manager
Version 5.0
Rational Rhapsody Design Manager
Version 6.0.1
Rational Rhapsody Design Manager
Version 6.0
Configuration H
13 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Rational Software Architect Design Manager
Version 4.0.1
Rational Software Architect Design Manager
Version 4.0.2
Rational Software Architect Design Manager
Version 4.0.3
Rational Software Architect Design Manager
Version 4.0.4
Rational Software Architect Design Manager
Version 4.0.5
Rational Software Architect Design Manager
Version 4.0.6
Rational Software Architect Design Manager
Version 4.0.7
Rational Software Architect Design Manager
Version 4.0
Rational Software Architect Design Manager
Version 5.0.1
Rational Software Architect Design Manager
Version 5.0.2
Rational Software Architect Design Manager
Version 5.0
Rational Software Architect Design Manager
Version 6.0.1
Rational Software Architect Design Manager
Version 6.0

Related CWEs

CWE-611
Improper Restriction of XML External Entity Reference
The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

References (4)

Source: psirt@us.ibm.com
Vendor Advisory
Source: psirt@us.ibm.com
VDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
VDB EntryVendor Advisory

Timeline

No history available yet.