CVE-2018-1539

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6 could allow remote attackers to bypass authentication via a direct request or forced browsing to a page other than URL intended. IBM X-Force ID: 142561.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
IBM	Rational Engineering Lifecycle Manager	5.0; 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; 6.0.6; 5.01; 5.02

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/142561VDB Entry, Vendor Advisory
https://www.ibm.com/support/docview.wss?uid=ibm10731511Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/142561VDB Entry, Vendor Advisory
https://www.ibm.com/support/docview.wss?uid=ibm10731511Vendor Advisory

Timeline

Published: Sep 25, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-153906.8A vulnerability in the FTP inspection engine of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacke CVE-2018-153917.5A vulnerability in certain IPv4 fragment-processing functions of Cisco Remote PHY Software could allow an unauthenticated, remote attacker t CVE-2018-153924.3A vulnerability in the DHCP service of Cisco Industrial Network Director could allow an unauthenticated, adjacent attacker to cause a denial CVE-2018-153936.1A vulnerability in the web-based management interface of Cisco Content Security Management Appliance (SMA) Software could allow an unauthent CVE-2018-153949.8A vulnerability in the Stealthwatch Management Console (SMC) of Cisco Stealthwatch Enterprise could allow an unauthenticated, remote attacke CVE-2018-153955.4A vulnerability in the authentication and authorization checking mechanisms of Cisco Wireless LAN Controller (WLC) Software could allow an a CVE-2018-153966.8A vulnerability in the Bulk Administration Tool (BAT) for Cisco Unity Connection could allow an authenticated, remote attacker to cause high CVE-2018-153976.8A vulnerability in the implementation of Traffic Flow Confidentiality (TFC) over IPsec functionality in Cisco Adaptive Security Appliance (A CVE-2018-153984.0A vulnerability in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD CVE-2018-153996.8A vulnerability in the TCP syslog module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Softwa CVE-2018-154006.1A vulnerability in the web-based management interface of Cisco Cloud Services Platform 2100 could allow an unauthenticated, remote attacker CVE-2018-154016.5A vulnerability in the web-based management interface of Cisco Hosted Collaboration Mediation Fulfillment could allow an unauthenticated, re