CVE-2013-3036: Input Validation
Published Sep 12, 2013
·Updated
Open redirect vulnerability in IBM Rational Requirements Composer before 4.0.4 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.
Affected Software
4 affected components
IBM Rational Requirements Composer<=4.0.3
IBM Rational Requirements Composer=4.0.0
IBM Rational Requirements Composer=4.0.1
IBM Rational Requirements Composer=4.0.2
Event History
Sep 12, 2013
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-3036?
CVE-2013-3036 is considered a high-severity vulnerability due to its potential for exploitation in phishing attacks.
2
How do I fix CVE-2013-3036?
To fix CVE-2013-3036, upgrade IBM Rational Requirements Composer to version 4.0.4 or later.
3
What type of vulnerability is CVE-2013-3036?
CVE-2013-3036 is an open redirect vulnerability that allows attackers to redirect users to arbitrary websites.
4
Who is affected by CVE-2013-3036?
Users of IBM Rational Requirements Composer versions prior to 4.0.4 are affected by CVE-2013-3036.
5
What can attackers do with CVE-2013-3036?
Attackers can exploit CVE-2013-3036 to conduct phishing attacks by redirecting users to malicious sites.