IBM Rational Requirements Composer CVE-2013-3038 Unspecified Information Disclosure Vulnerability

Bugtraq ID:	62298
Class:	Design Error
CVE:	CVE-2013-3038
Remote:	Yes
Local:	No
Published:	Sep 06 2013 12:00AM
Updated:	Sep 06 2013 12:00AM
Credit:	IBM
Vulnerable:	IBM Rational Requirements Composer 4.0.3 IBM Rational Requirements Composer 4.0.1 IBM Rational Requirements Composer 4.0
Not Vulnerable:	IBM Rational Requirements Composer 4.0.4

IBM Rational Requirements Composer CVE-2013-3038 Unspecified Information Disclosure Vulnerability

IBM Rational Requirements Composer is prone to an unspecified information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may aid in further attacks.

IBM Rational Requirements Composer 4.0.3 and prior are vulnerable.

IBM Rational Requirements Composer CVE-2013-3038 Unspecified Information Disclosure Vulnerability

An attacker can exploit this issue using a web browser.

IBM Rational Requirements Composer CVE-2013-3038 Unspecified Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Rational Requirements Composer CVE-2013-3038 Unspecified Information Disclosure Vulnerability

References:

• IBM Homepage (IBM)
  
• IBM Rational Requirements Composer Homepage (IBM)
  
• Potential security vulnerabilities in Rational Requirements Composer 4.x (CVE-20 (IBM)