CVE-2015-0121

CVE-2015-0121 describes a vulnerability in IBM Rational Requirements Composer and Rational DOORS Next Generation, affecting versions 3.0 through 3.0.1.6, 4.0 through 4.0.7, and 5.0 through 5.0.2 respectively. When using LTPA single sign-on with WebSphere Application Server, these products fail to terminate a Requirements Management session upon LTPA token expiration. This allows an attacker to gain unauthorized access to an unattended workstation. The vulnerability has a CVSS score of 3.7, indicating low severity. It requires local access and high attack complexity, with potential impacts on confidentiality, integrity, and availability. The EPSS score is very low, suggesting minimal exploitability in the wild. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are virtually nonexistent, aligning with the typical lack of attention for most vulnerabilities.