CVE-2018-1587: Infoleak
IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 could reveal technical error messages to allow an adversary to gain information about the application and database that could be used to conduct further attacks. IBM X-Force ID: 143500.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1587?
CVE-2018-1587 has been rated as Medium severity due to the potential information disclosure it poses.
How do I fix CVE-2018-1587?
To mitigate CVE-2018-1587, upgrade IBM Rational Rhapsody Design Manager or IBM Rational Software Architect Design Manager to a version above 6.0.5 or 6.0.1 respectively.
What versions are affected by CVE-2018-1587?
CVE-2018-1587 affects IBM Rational Rhapsody Design Manager versions 5.0 to 5.0.2 and 6.0 to 6.0.5, and IBM Rational Software Architect Design Manager versions 5.0 to 5.0.2 and 6.0 to 6.0.1.
What kind of information can be disclosed through CVE-2018-1587?
CVE-2018-1587 may allow adversaries to gain insights into technical error messages, potentially revealing sensitive details about the application and database.
Is there a workaround for CVE-2018-1587 until I can upgrade?
There are no documented workarounds for CVE-2018-1587, so upgrading to a fixed version is the recommended approach.