CVE-2019-4252: Path Traversal
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 159883.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-4252?
CVE-2019-4252 is a vulnerability in IBM Rational Collaborative Lifecycle Management that could allow a remote attacker to traverse directories on the system.
How does CVE-2019-4252 work?
CVE-2019-4252 works by exploiting a flaw in the system where an attacker can send specially-crafted URL requests containing "dot dot" sequences (/../) to view arbitrary files on the system.
Which software versions are affected by CVE-2019-4252?
IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.6.1, IBM Rational DOORS Next Generation versions 6.0 through 6.0.6.1, IBM Rational Engineering Lifecycle Manager versions 6.0 through 6.0.6.1, IBM Rational Quality Manager versions 6.0 through 6.0.6.1, IBM Rational Rhapsody Design Manager versions 6.0 through 6.0.6.1, IBM Rational Software Architect Design Manager versions 6.0 through 6.0.1, and IBM Rational Team Concert versions 6.0 through 6.0.6.1 are all affected by CVE-2019-4252.
What is the severity of CVE-2019-4252?
The severity of CVE-2019-4252 is high with a CVSS score of 7.5.
How can I mitigate CVE-2019-4252?
To mitigate CVE-2019-4252, apply the necessary security fixes and patches provided by IBM.