Engineering Systems Design Rhapsody vulnerabilities
4 known vulnerabilities in Engineering Systems Design Rhapsody from IBM. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Engineering Systems Design Rhapsody: Improper Restriction of Operations within the Bounds of a Memory Buffer
IBM Engineering Systems Design Rhapsody 9.0.2, 10.0, and 10.0.1 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.
- 8.8 High severity
Engineering Systems Design Rhapsody: Improper Restriction of Operations within the Bounds of a Memory Buffer
IBM Engineering Systems Design Rhapsody 9.0.2, 10.0, and 10.0.1 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system.
- 7.5 High severity
Engineering Systems Design Rhapsody: Missing Encryption of Sensitive Data
IBM Engineering Systems Design Rhapsody 9.0.2, 10.0, and 10.0.1 transmits sensitive information without encryption that could allow an attacker to obtain highly sensitive information.
- 8.1 High severity
Engineering Systems Design Rhapsody - Model…: Time-of-check Time-of-use (TOCTOU) Race Condition
IBM Engineering Systems Design Rhapsody - Model Manager 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, an attacker could exploit this vulnerability to remotely