CVE-2013-3042

CWE-22 — Path Traversal3 documents3 sources

Severity

2.1LOW

EPSS

0.0%

top 94.83%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Rational Software Architect Design Manager IBM Rhapsody Design Manager

Timeline

PublishedDec 14

Latest updateMay 17

Description

Directory traversal vulnerability in the server in IBM Rational Software Architect Design Manager and Rhapsody Design Manager 3.x and 4.x before 4.0.5 allows local users to read arbitrary files via vectors involving temporary files.

CVSS vector

AV:L/AC:L/C:P/I:N/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages2 packages

▶NVDibm/rational_software_architect_design_manager8 versions+7

▶NVDibm/rhapsody_design_manager8 versions+7

🔴Vulnerability Details

GHSA

GHSA-299w-wrq3-r3wf: Directory traversal vulnerability in the server in IBM Rational Software Architect Design Manager and Rhapsody Design Manager 3↗2022-05-17

▶

CVEList

CVE-2013-3042: Directory traversal vulnerability in the server in IBM Rational Software Architect Design Manager and Rhapsody Design Manager 3↗2013-12-14

▶