CVE-2017-1602

Published: Mar 23, 2018Modified: Nov 21, 2024

4.3

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to using a specially crafted URL. IBM X-Force ID: 132625.

Affected (32)

Products: Ibm: Rational Collaborative Lifecycle Management, Rational Quality Manager, Rational Team Concert, Rational Doors Next Generation, Rational Engineering Lifecycle Manager, Rational Rhapsody Design Manager, Rational Software Architect Design Manager

Ibm

7 products

Rational Collaborative Lifecycle Management

Rational Quality Manager

Rational Team Concert

Rational Doors Next Generation

Rational Engineering Lifecycle Manager

Rational Rhapsody Design Manager

Rational Software Architect Design Manager

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Collaborative Lifecycle Management	From 4.0.0 to 6.0.5

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Quality Manager	From 4.0.0 to 4.0.7
Ibm Rational Quality Manager	From 6.0.0 to 6.0.5
Ibm Rational Quality Manager	Version 5.0.0
Ibm Rational Quality Manager	Version 5.0.1
Ibm Rational Quality Manager	Version 5.0.2

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Team Concert	From 4.0.0 to 4.0.7
Ibm Rational Team Concert	From 6.0.0 to 6.0.5
Ibm Rational Team Concert	Version 5.0.0
Ibm Rational Team Concert	Version 5.0.1
Ibm Rational Team Concert	Version 5.0.2

Configuration D

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Doors Next Generation	From 4.0.1 to 4.0.7
Ibm Rational Doors Next Generation	From 6.0.0 to 6.0.5
Ibm Rational Doors Next Generation	Version 5.0.0
Ibm Rational Doors Next Generation	Version 5.0.1
Ibm Rational Doors Next Generation	Version 5.0.2

Configuration E

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Engineering Lifecycle Manager	From 4.0.3 to 4.0.7
Ibm Rational Engineering Lifecycle Manager	From 6.0.0 to 6.0.5
Ibm Rational Engineering Lifecycle Manager	Version 5.0.0
Ibm Rational Engineering Lifecycle Manager	Version 5.0.1
Ibm Rational Engineering Lifecycle Manager	Version 5.0.2

Configuration F

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Rhapsody Design Manager	From 4.0 to 4.0.7
Ibm Rational Rhapsody Design Manager	From 6.0.0 to 6.0.5
Ibm Rational Rhapsody Design Manager	Version 5.0.0
Ibm Rational Rhapsody Design Manager	Version 5.0.1
Ibm Rational Rhapsody Design Manager	Version 5.0.2

Configuration G

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Software Architect Design Manager	From 4.0.0 to 4.0.7
Ibm Rational Software Architect Design Manager	Version 5.0.0
Ibm Rational Software Architect Design Manager	Version 5.0.1
Ibm Rational Software Architect Design Manager	Version 5.0.2
Ibm Rational Software Architect Design Manager	Version 6.0.0
Ibm Rational Software Architect Design Manager	Version 6.0.1