NetSight
medium4.3

CVE-2017-1602

IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to u…

Impact

IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to using a specially crafted URL. IBM X-Force ID: 132625.

Affected products

VendorProductAffected versions
IbmRational Collaborative Lifecycle Management
from 4.0.0 through 6.0.5
IbmRational Quality Manager
from 4.0.0 through 4.0.7
from 6.0.0 through 6.0.5
Versions 5.0.0, 5.0.1, 5.0.2
IbmRational Team Concert
from 4.0.0 through 4.0.7
from 6.0.0 through 6.0.5
Versions 5.0.0, 5.0.1, 5.0.2
IbmRational Doors Next Generation
from 4.0.1 through 4.0.7
from 6.0.0 through 6.0.5
Versions 5.0.0, 5.0.1, 5.0.2
IbmRational Engineering Lifecycle Manager
from 4.0.3 through 4.0.7
from 6.0.0 through 6.0.5
Versions 5.0.0, 5.0.1, 5.0.2
IbmRational Rhapsody Design Manager
from 4.0 through 4.0.7
from 6.0.0 through 6.0.5
Versions 5.0.0, 5.0.1, 5.0.2
IbmRational Software Architect Design Manager
from 4.0.0 through 4.0.7
Versions 5.0.0, 5.0.1, 5.0.2, 6.0.0, 6.0.1

Weakness classification

References