CVE-2014-6129
Severity CVSS v4.0:
Pending analysis
Type:
CWE-264
Permissions, Privileges, and Access Control
Publication date:
18/03/2015
Last modified:
12/04/2025
Description
IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix5, 4.x before 4.0.7 iFix4, and 5.x before 5.0.2 iFix2; Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix5, 4.x before 4.0.7 iFix4, and 5.x before 5.0.2 iFix2; Rational DOORS Next Generation 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Requirements Composer 2.x and 3.x before 3.0.1.6 iFix5; and other products, allows remote authenticated users to delete the dashboards of arbitrary users via unspecified vectors.
Impact
Base Score 2.0
5.50
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:ibm:rational_quality_manager:2.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:rational_quality_manager:2.0.0.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:rational_quality_manager:2.0.0.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:rational_quality_manager:2.0.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:rational_quality_manager:2.0.1.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:rational_quality_manager:3.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:rational_quality_manager:3.0.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:rational_quality_manager:3.0.1.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:rational_quality_manager:3.0.1.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:rational_quality_manager:3.0.1.3:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:rational_quality_manager:3.0.1.4:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:rational_quality_manager:3.0.1.5:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:rational_quality_manager:3.0.1.6:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:rational_quality_manager:4.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:ibm:rational_quality_manager:4.0.0.1:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page