CVE-2018-1587

IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0…

Medium4.3EPSS 0.97%

Published: 19 Jul 2018
Updated: 17 Sept 2024
Reserved: 13 Dec 2017
Assigned by: ibm

Description

IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 could reveal technical error messages to allow an adversary to gain information about the application and database that could be used to conduct further attacks. IBM X-Force ID: 143500.

Scores

CVSS scores of CVE-2018-1587, by who scored it
Scored by	CVSS	Score	Vector
ibmCNA (assigner)	3.0	Medium4.3	CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O
NVDNVD · Modified	3.0	Medium4.3	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS (exploitation in 30 days): 0.97% · top 38% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.3.

Weakness

Obtain Information
CWE-200 (opens in a new tab)All about CWE-200 and its CVEs

Affected products

IBM · Rational Software Architect Design Manager
- affected 5.0
- affected 5.0.2
- affected 5.0.1
- affected 6.0
- affected 6.0.1
IBM · Rational Rhapsody Design Manager
- affected 5.0
- affected 5.0.2
- affected 5.0.1
- affected 6.0
- affected 6.0.1
- affected 6.0.2
- affected 6.0.3
- affected 6.0.4
- affected 6.0.5

References (2)

ibm-rhapsody-cve20181587-info-disc(143500) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
http://www.ibm.com/support/docview.wss?uid=ibm10716029 (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2018-1587](https://trackcve.app/badge/CVE-2018-1587.svg)](https://trackcve.app/cve/CVE-2018-1587)

Record last updated 17 Sept 2024, 02:21 UTC.