NetSight
medium4.3

CVE-2017-1734

IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational E…

Impact

IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) stores potentially sensitive information in a cache that could be read by authenticated users. IBM X-Force ID: 134915.

Affected products

VendorProductAffected versions
IbmRational Collaborative Lifecycle Management
after 5.0 through 6.0.5
IbmRational Doors Next Generation
from 5.0 through 5.0.2
from 6.0 through 6.0.5
IbmRational Engineering Lifecycle Manager
from 5.0 through 5.0.2
from 6.0 through 6.0.5
IbmRational Quality Manager
from 5.0 through 5.0.2
from 6.0 through 6.0.5
IbmRational Rhapsody Design Manager
from 5.0 through 5.0.2
from 6.0 through 6.0.5
IbmRational Software Architect Design Manager
from 5.0 through 5.0.2
from 6.0 through 6.0.1
IbmRational Team Concert
from 5.0 through 5.0.2
from 6.0 through 6.0.5

Weakness classification

References