CVE:CVE-2014-0948
CNNVD:CNNVD-201407-720
IBM Rational Software Architect（RSA）Design Manager和Rational Rhapsody Design Manager都是美国IBM公司的产品。RSA Design Manager是一套基于Jazz技术的协作式软件设计和开发平台。Rational Rhapsody Design Manager是一款通过中心设计存储库对设计和模型进行存储、共享、搜索和管理的软件。
IBM RSA Design Manager和Rational Rhapsody Design Manager 3.x和4.0.7之前4.x版本中存在安全漏洞。远程攻击者可通过特制的ZIP文件利用该漏洞执行任意代码。
solution:Upgrade ibm rhapsody_design_manager to a higher version than 3.0.0,3.0.0.1,3.0.1,4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,and avoid the version 3.0.0,3.0.0.1,3.0.1,4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6; Upgrade ibm rational_software_architect_design_manager to a higher version than 3.0.0,3.0.0.1,3.0.1,4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,and avoid the version 3.0.0,3.0.0.1,3.0.1,4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6