Information Disclosure Vulnerability in IBM Jazz Team Server Products
CVE-2017-1725

4.3MEDIUM

Key Information:

Vendor
IBM
Status
Rational Quality Manager
Rational Collaborative Lifecycle Management
Rational Engineering Lifecycle Manager
Rational Doors Next Generation
Vendor
CVE Published:
24 April 2018

Summary

IBM Jazz Team Server and associated Rational products are susceptible to an undisclosed vulnerability that may allow unauthorized access to sensitive information. This security flaw could potentially expose confidential data to unintended parties, posing significant risks for organizations relying on these products for project management and software development. It is crucial for users to apply the latest security patches and updates to mitigate this vulnerability.

Affected Version(s)

Rational Collaborative Lifecycle Management 5.0

Rational Collaborative Lifecycle Management 5.0.1

Rational Collaborative Lifecycle Management 5.0.2

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/134820
vdb-entryx_refsource_XF
http://www.ibm.com/support/docview.wss?uid=swg22015635
x_refsource_CONFIRM

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.