Information Disclosure Vulnerability in IBM Jazz Products
CVE-2017-1488

3.7LOW

Key Information:

Vendor
IBM
Status
Rational Engineering Lifecycle Manager
Rational Doors Next Generation
Rational Quality Manager
Rational Collaborative Lifecycle Management
Vendor
CVE Published:
6 July 2018

Summary

An undisclosed information disclosure vulnerability exists within IBM Jazz common products, potentially exposing sensitive information to unauthorized users. This vulnerability calls for immediate attention and remediation to protect data integrity and confidentiality across affected platforms, including IBM Jazz Team Server, Rational Team Concert, and Engineering Lifecycle Management. Organizations using these products are advised to implement recommended patches and follow best practices for security to mitigate any risks associated with this vulnerability.

Affected Version(s)

Rational Collaborative Lifecycle Management 6.0

Rational Collaborative Lifecycle Management 6.0.1

Rational Collaborative Lifecycle Management 6.0.2

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/128627
vdb-entryx_refsource_XF
https://www-prd-trops.events.ibm.com/node/715709
x_refsource_CONFIRM

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.