What’s Vulnerable › Vulnerabilities

CVE-2015-7449

• Severity: low (CVSS 3.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-03-20 · updated 2026-06-17
• Weakness: CWE-200

Description

IBM Rational Collaborative Lifecycle Management (CLM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Quality Manager (RQM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Team Concert (RTC) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Requirements Composer (RRC) 4.0.x before 4.0.7 iFix10; Rational DOORS Next Generation (RDNG) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Engineering Lifecycle Manager (RELM) 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.0.7 before iFix1, 5.0.x before 5.0.2 iFix1, and 6.0.x before 6.0.2; Rational Rhapsody Design Manager (Rhapsody DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Software Architect Design Manager (RSA DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2 allow local users to obtain sensitive information by leveraging weak encryption. IBM X-Force ID: 108221.

Affected products

• IBM Rational Collaborative Lifecycle Management: from 4.0.0 through 6.0.2
• IBM Rational DOORS Next Generation: from 4.0.0 through 4.0.7; 5.0.0, 5.0.1, 5.0.2, 6.0.0, 6.0.1, 6.0.2
• IBM Rational Engineering Lifecycle Manager: from 4.0.3 through 4.0.7; 5.0.0, 5.0.1, 5.0.2, 6.0.0, 6.0.1, 6.0.2
• IBM Rational Quality Manager: from 4.0.0 through 4.0.7; 5.0.0, 5.0.1, 5.0.2, 6.0.0, 6.0.1, 6.0.2
• IBM Rational Requirements Composer: from 4.0.0 through 4.0.7
• IBM Corporation Rational Rhapsody Design Manager: from 4.0 through 4.0.7; 5.0.0, 5.0.1, 5.0.2, 6.0.0, 6.0.1, 6.0.2
• IBM Rational Software Architect Design Manager: from 4.0.0 through 4.0.7; 5.0.0, 5.0.1, 5.0.2, 6.0.0, 6.0.1, 6.0.2
• IBM Rational Team Concert: from 4.0.0 through 4.0.7; 5.0.0, 5.0.1, 5.0.2, 6.0.0, 6.0.1, 6.0.2

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21985143
• https://exchange.xforce.ibmcloud.com/vulnerabilities/108221
• http://www-01.ibm.com/support/docview.wss?uid=swg21985143
• https://exchange.xforce.ibmcloud.com/vulnerabilities/108221

Get alerted when CVE-2015-7449 or the next vulnerability affects your stack