{"id":"CVE-2018-1587","state":"PUBLISHED","title":"IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 could reveal","description":"IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 could reveal technical error messages to allow an adversary to gain information about the application and database that could be used to conduct further attacks. IBM X-Force ID: 143500.","publishedAt":"2018-07-19T14:00:00.000Z","updatedAt":"2024-09-17T02:21:12.104Z","severity":{"score":4.3,"label":"Medium","version":"3.0","vector":"CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O","source":"ibm"},"assigner":"ibm","products":["IBM Rational Software Architect Design Manager","IBM Rational Rhapsody Design Manager"],"affected":[{"vendor":"IBM","product":"Rational Software Architect Design Manager","versions":[{"version":"5.0","status":"affected"},{"version":"5.0.2","status":"affected"},{"version":"5.0.1","status":"affected"},{"version":"6.0","status":"affected"},{"version":"6.0.1","status":"affected"}]},{"vendor":"IBM","product":"Rational Rhapsody Design Manager","versions":[{"version":"5.0","status":"affected"},{"version":"5.0.2","status":"affected"},{"version":"5.0.1","status":"affected"},{"version":"6.0","status":"affected"},{"version":"6.0.1","status":"affected"},{"version":"6.0.2","status":"affected"},{"version":"6.0.3","status":"affected"},{"version":"6.0.4","status":"affected"},{"version":"6.0.5","status":"affected"}]}],"references":["https://exchange.xforce.ibmcloud.com/vulnerabilities/143500","http://www.ibm.com/support/docview.wss?uid=ibm10716029"],"weaknesses":[],"ingestedAt":"2026-10-29T19:44:36.861Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/1xxx/CVE-2018-1587.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-1587","state":"PUBLISHED","datePublished":"2018-07-19T14:00:00.000Z","dateUpdated":"2024-09-17T02:21:12.104Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2017-12-13T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 could reveal technical error messages to allow an adversary to gain information about the application and database that could be used to conduct further attacks. IBM X-Force ID: 143500."}],"affected":[{"vendor":"IBM","product":"Rational Software Architect Design Manager","versions":[{"version":"5.0","status":"affected"},{"version":"5.0.2","status":"affected"},{"version":"5.0.1","status":"affected"},{"version":"6.0","status":"affected"},{"version":"6.0.1","status":"affected"}]},{"vendor":"IBM","product":"Rational Rhapsody Design Manager","versions":[{"version":"5.0","status":"affected"},{"version":"5.0.2","status":"affected"},{"version":"5.0.1","status":"affected"},{"version":"6.0","status":"affected"},{"version":"6.0.1","status":"affected"},{"version":"6.0.2","status":"affected"},{"version":"6.0.3","status":"affected"},{"version":"6.0.4","status":"affected"},{"version":"6.0.5","status":"affected"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/143500","name":"ibm-rhapsody-cve20181587-info-disc(143500)","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://www.ibm.com/support/docview.wss?uid=ibm10716029","tags":["x_refsource_CONFIRM"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","exploitCodeMaturity":"UNPROVEN","integrityImpact":"NONE","privilegesRequired":"LOW","remediationLevel":"OFFICIAL_FIX","reportConfidence":"CONFIRMED","scope":"UNCHANGED","temporalScore":3.8,"temporalSeverity":"LOW","userInteraction":"NONE","vectorString":"CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Obtain Information","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2018-07-19T13:57:01.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2018-07-16T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2018-07-16T00:00:00","ID":"CVE-2018-1587","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Rational Software Architect Design Manager","version":{"version_data":[{"version_value":"5.0"},{"version_value":"5.0.2"},{"version_value":"5.0.1"},{"version_value":"6.0"},{"version_value":"6.0.1"}]}},{"product_name":"Rational Rhapsody Design Manager","version":{"version_data":[{"version_value":"5.0"},{"version_value":"5.0.2"},{"version_value":"5.0.1"},{"version_value":"6.0"},{"version_value":"6.0.1"},{"version_value":"6.0.2"},{"version_value":"6.0.3"},{"version_value":"6.0.4"},{"version_value":"6.0.5"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 could reveal technical error messages to allow an adversary to gain information about the application and database that could be used to conduct further attacks. IBM X-Force ID: 143500."}]},"impact":{"cvssv3":{"BM":{"A":"N","AC":"L","AV":"N","C":"L","I":"N","PR":"L","S":"U","UI":"N"},"TM":{"E":"U","RC":"C","RL":"O"}}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Obtain Information"}]}]},"references":{"reference_data":[{"name":"ibm-rhapsody-cve20181587-info-disc(143500)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/143500"},{"name":"http://www.ibm.com/support/docview.wss?uid=ibm10716029","refsource":"CONFIRM","url":"http://www.ibm.com/support/docview.wss?uid=ibm10716029"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/143500","name":"ibm-rhapsody-cve20181587-info-disc(143500)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.ibm.com/support/docview.wss?uid=ibm10716029","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T04:07:43.853Z"}}]}}}