IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational DOORS Next Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5 allow remote authenticated users to execute arbitrary OS commands via a crafted request.
| Software | From | Fixed in |
|---|---|---|
| ibm / rational_team_concert | 6.0.1 | 6.0.1.x |
| ibm / rational_team_concert | 4.0.0 | 4.0.0.x |
| ibm / rational_team_concert | 4.0.5 | 4.0.5.x |
| ibm / rational_team_concert | 5.0.0 | 5.0.0.x |
| ibm / rational_team_concert | 6.0.0 | 6.0.0.x |
| ibm / rational_team_concert | 6.0.2 | 6.0.2.x |
| ibm / rational_team_concert | 4.0.6 | 4.0.6.x |
| ibm / rational_team_concert | 4.0.4 | 4.0.4.x |
| ibm / rational_team_concert | 4.0.7 | 4.0.7.x |
| ibm / rational_team_concert | 4.0.1 | 4.0.1.x |
| ibm / rational_team_concert | 4.0.2 | 4.0.2.x |
| ibm / rational_team_concert | 5.0.1 | 5.0.1.x |
| ibm / rational_team_concert | 3.0.1.6 | 3.0.1.6.x |
| ibm / rational_team_concert | 4.0.3 | 4.0.3.x |
| ibm / rational_team_concert | 5.0.2 | 5.0.2.x |