IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generatio…

Published 8 y ago 2018-04-24 · modified 4 mo ago 2026-06-17 · JSON

CVSS

6.5

v3.0 · NVD

CISA KEV

not known exploited

EPSS

1.1%

percentile 66%

Public exploits

none known

IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) could allow an authenticated user to cause a denial of service due to incorrect authorization for resource intensive scenarios. IBM X-Force ID: 134392.

Exploit prediction (EPSS)

1.12% probability of exploitation in the next 30 days, higher than 66% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	6.5	`CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`
NVD	2.0	4.0	`AV:N/AC:L/Au:S/C:N/I:N/A:P`

Affected products

IBM Rational Team Concert
IBM Rational Engineering Lifecycle Manager
IBM Rational Software Architect Design Manager
IBM Rational Quality Manager
IBM Rational DOORS Next Generation
IBM Rational Collaborative Lifecycle Management
IBM Rational Rhapsody Design Manager

Classification

Weakness

CWE-863 Incorrect Authorization

References

exchange.xforce.ibmcloud.com /vulnerabilities/134392 · vdb-entry, x_refsource_XF, x_transferred
ibm.com /support/docview.wss?uid=swg22015635 · x_refsource_CONFIRM, x_transferred

Sources

CVE List: CVE-2017-1700
NVD: CVE-2017-1700

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.