Information Disclosure Vulnerability in IBM Jazz Products
CVE-2017-1488

3.7LOW

Summary

An undisclosed information disclosure vulnerability exists within IBM Jazz common products, potentially exposing sensitive information to unauthorized users. This vulnerability calls for immediate attention and remediation to protect data integrity and confidentiality across affected platforms, including IBM Jazz Team Server, Rational Team Concert, and Engineering Lifecycle Management. Organizations using these products are advised to implement recommended patches and follow best practices for security to mitigate any risks associated with this vulnerability.

Affected Version(s)

Rational Collaborative Lifecycle Management 6.0

Rational Collaborative Lifecycle Management 6.0.1

Rational Collaborative Lifecycle Management 6.0.2

References

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.