CVE-2015-0121

no score yetEPSS 0.4%

IBM Rational Requirements Composer 3.0 through 3.0.1.6 and 4.0 through 4.0.7 and Rational DOORS Next Generation (RDNG) 4.0 through 4.0.7 and 5.0 through 5.0.2, when LTPA single sign on is used with WebSphere Application Server, do not terminate a Requirements Management (RM) session upon LTPA token expiration, which allows remote attackers to obtain access by leveraging an unattended workstation.

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
Published: 2015-05-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:rational_doors_next_generation
ibm:rational_requirements_composer

References

http://www-01.ibm.com/support/docview.wss?uid=swg21903761
http://www.securityfocus.com/bid/74910
http://www-01.ibm.com/support/docview.wss?uid=swg21903761
http://www.securityfocus.com/bid/74910

Check your stack JSON