CVE-2016-0219
XML external entity (XXE) vulnerability in IBM Rational Team Concert 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1 iFix4 allows remote authenticated users to cause a denial of service via crafted XML data. IBM X-Force ID: 109693.
- Score
- CVSS 3.0 6.5 Medium
- Status
- Modified - psirt@us.ibm.com
- Published
- 2018-01-16
- Last modified
- 2024-08-05
- Weaknesses
- CWE-611
Affected products
- Rational Collaborative Lifecycle Management (Ibm)
- Rational Doors Next Generation (Ibm)
- Rational Engineering Lifecycle Manager (Ibm)
- Rational Quality Manager (Ibm)
- Rational Requirements Composer (Ibm)
- Rational Rhapsody Design Manager (Ibm)
- Rational Software Architect Design Manager (Ibm)
- Rational Team Concert (Ibm)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21983720
- https://exchange.xforce.ibmcloud.com/vulnerabilities/109693
