Unscored severity · published Dec 14, 2013
CVE-2013-3043
Directory traversal vulnerability in the client in IBM Rational Software Architect Design Manager and Rhapsody Design Manager 3.x and 4.x before 4.0.5 allows local users to read…
–
CVSS
0.6%
EPSS
No
On KEV
Description
Directory traversal vulnerability in the client in IBM Rational Software Architect Design Manager and Rhapsody Design Manager 3.x and 4.x before 4.0.5 allows local users to read arbitrary files via vectors involving temporary files.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RS
Rational Software Architect Design Manager · Ibm
3.0.0; 3.0.0.1; 3.0.1; 4.0.0; 4.0.1; 4.0.2; +2 more · source: NVD
RD
Rhapsody Design Manager · Ibm
3.0.0; 3.0.0.1; 3.0.1; 4.0.0; 4.0.1; 4.0.2; +2 more · source: NVD
Affected product
RS
Rational Software Architect Design Manager
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-3043
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-3043
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21655724
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/84769
More from Rational Software Architect Design Manager
8.1
CVE-2016-9707
IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data
7.8
CVE-2015-7440
IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4;…
7.5
CVE-2019-4252
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow a remote attacker to traverse directories on the system
7.1
CVE-2018-1456
IBM Rhapsody DM 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data
6.8
CVE-2018-1492
IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to the server's failure to properly log out from the previous…