CVE-2017-1734
IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generatio…
Published 8 y ago · modified 4 mo ago · JSON
Summary
IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) stores potentially sensitive information in a cache that could be read by authenticated users. IBM X-Force ID: 134915.
Exploit prediction (EPSS)
0.95% probability of exploitation in the next 30 days, higher than 61% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 4.3 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
| NVD | 2.0 | 4.0 | AV:N/AC:L/Au:S/C:P/I:N/A:N |
Affected products
- IBM Rational Engineering Lifecycle Manager
- IBM Rational Quality Manager
- IBM Rational Rhapsody Design Manager
- IBM Rational Collaborative Lifecycle Management
- IBM Rational DOORS Next Generation
- IBM Rational Team Concert
- IBM Rational Software Architect Design Manager
Classification
- Weakness
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
References
- ibm.com /support/docview.wss?uid=swg22015635 · x_refsource_CONFIRM, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/134915 · vdb-entry, x_refsource_XF, x_transferred
Sources
- CVE List: CVE-2017-1734
- NVD: CVE-2017-1734
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.