CVE-2015-0121 | BDVDB-2026-69645 Detail

Description#

IBM Rational Requirements Composer 3.0 through 3.0.1.6 and 4.0 through 4.0.7 and Rational DOORS Next Generation (RDNG) 4.0 through 4.0.7 and 5.0 through 5.0.2, when LTPA single sign on is used with WebSphere Application Server, do not terminate a Requirements Management (RM) session upon LTPA token expiration, which allows remote attackers to obtain access by leveraging an unattended workstation.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?uid=swg21903761
http://www.securityfocus.com/bid/74910

Exploit#

No public exploit known

History#

Version 12015-05-30Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.