IBM Rational Requirements Composer CVE-2013-3039 Authentication Bypass Vulnerability

Bugtraq ID:	62299
Class:	Access Validation Error
CVE:	CVE-2013-3039
Remote:	Yes
Local:	No
Published:	Sep 06 2013 12:00AM
Updated:	Sep 06 2013 12:00AM
Credit:	Reported by the vendor
Vulnerable:	IBM Rational Requirements Composer 4.0.3 IBM Rational Requirements Composer 4.0.1 IBM Rational Requirements Composer 4.0
Not Vulnerable:	IBM Rational Requirements Composer 4.0.4

IBM Rational Requirements Composer CVE-2013-3039 Authentication Bypass Vulnerability

IBM Rational Requirements Composer is prone to an authentication-bypass vulnerability.

An attacker can exploit this issue to bypass the authentication mechanism and perform unauthorized actions on the affected computer. This may aid in further attacks.

IBM Rational Requirements Composer 4.0.3 and prior are vulnerable.

IBM Rational Requirements Composer CVE-2013-3039 Authentication Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Rational Requirements Composer CVE-2013-3039 Authentication Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Rational Requirements Composer CVE-2013-3039 Authentication Bypass Vulnerability

References:

• IBM Homepage (IBM)
  
• IBM Rational Requirements Composer Homepage (IBM)
  
• Potential security vulnerabilities in Rational Requirements Composer 4.x (CVE-20 (IBM)