CVE-2018-1539 — Improper Authentication in IBM Rational Engineering Lifecycle Manager

CWE-287 — Improper Authentication3 documents3 sources
Severity
6.5MEDIUMNVD
CNA5.4
EPSS
0.1%
top 68.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Rational Engineering Lifecycle Manager
Timeline
PublishedSep 25
Latest updateMay 13

Description

IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6 could allow remote attackers to bypass authentication via a direct request or forced browsing to a page other than URL intended. IBM X-Force ID: 142561.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NExploitability: 3.9 | Impact: 2.5

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-2cjg-6xm9-4wh6: IBM Rational Engineering Lifecycle Manager 5↗2022-05-13
▶
CVEList
CVE-2018-1539: IBM Rational Engineering Lifecycle Manager 5↗2018-09-25
▶
CVE-2018-1539 — Improper Authentication in IBM | cvebase