CVE-2016-0326

IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1 ifix3 allow remote authenticated users to execute arbitrary OS commands via a crafted "HTML request."

Score

CVSS 3.0 8.8 High

Status

Modified - psirt@us.ibm.com

Published

2016-10-22

Last modified

2024-08-05

Weaknesses

CWE-77

Affected products

• Rational Collaborative Lifecycle Management (Ibm)
• Rational Quality Manager (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21989735
• http://www.securityfocus.com/bid/93824