CVE-2013-3036 — Improper Input Validation in IBM Rational Requirements Composer

CWE-20 — Improper Input Validation3 documents3 sources
Severity
4.9MEDIUMNVD
EPSS
0.1%
top 65.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Rational Requirements Composer
Timeline
PublishedSep 12
Latest updateMay 17

Description

Open redirect vulnerability in IBM Rational Requirements Composer before 4.0.4 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.

CVSS vector

AV:N/AC:M/C:P/I:P/A:NExploitability: 6.8 | Impact: 4.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-94pm-q285-wp32: Open redirect vulnerability in IBM Rational Requirements Composer before 4↗2022-05-17
▶
CVEList
CVE-2013-3036: Open redirect vulnerability in IBM Rational Requirements Composer before 4↗2013-09-12
▶
CVE-2013-3036 — Improper Input Validation in IBM | cvebase