NetSight
IP …
medium4.3

CVE-2017-1524

IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to obtain sensitive information from a spec…

Impact

IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to obtain sensitive information from a specially crafted HTTP request that could be used to aid future attacks. IBM X-Force ID: 129970.

Affected products

VendorProductAffected versions
IbmRational Collaborative Lifecycle Management
from 4.0.0 through 6.0.5
IbmRational Quality Manager
from 4.0.0 through 4.0.7
from 6.0 through 6.0.5
Versions 5.0.0, 5.0.1, 5.0.2
IbmRational Team Concert
from 4.0.0 through 4.0.7
from 6.0.0 through 6.0.5
Versions 5.0.0, 5.0.1, 5.0.2
IbmRational Doors Next Generation
from 4.0.1 through 4.0.7
from 6.0.0 through 6.0.5
Versions 5.0.0, 5.0.1, 5.0.2
IbmRational Engineering Lifecycle Manager
from 4.0.3 through 4.0.7
from 6.0.0 through 6.0.5
Versions 5.0.0, 5.0.1, 5.0.2
IbmRational Rhapsody Design Manager
from 4.0 through 4.0.7
from 6.0.0 through 6.0.5
Versions 5.0.0, 5.0.1, 5.0.2
IbmRational Software Architect Design Manager
from 4.0.0 through 4.0.7
Versions 5.0.0, 5.0.1, 5.0.2, 6.0.0, 6.0.1

Weakness classification

CWE-200

References