CVE-2016-8973 — Unrestricted File Upload in Corporation Rational Rhapsody Design Manager

CWE-434 — Unrestricted File Upload3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.2%
top 59.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Corporation Rational Rhapsody Design ManagerIBM Rational Rhapsody Design Manager
Timeline
PublishedMar 20
Latest updateMay 17

Description

IBM Rhapsody DM 4.0, 5.0 and 6.0 contains an undisclosed vulnerability that may allow an authenticated user to upload infected malicious files to the server. IBM Reference #: 1999960.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-g3q5-wwmf-q83w: IBM Rhapsody DM 4↗2022-05-17
▶
CVEList
CVE-2016-8973: IBM Rhapsody DM 4↗2017-03-20
▶
CVE-2016-8973 — Unrestricted File Upload | cvebase