Skip to content
Sign in
4.3 Medium

CVE-2018-1606 IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM…

Description

IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Quality Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Rhapsody Design Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Software Architect Design Manager 5.0 through 5.02 and 6.0 through 6.0.1, IBM Rational Team Concert 5.0 through 5.02 and 6.0 through 6.0.6) could allow an authenticated user to obtain sensitive information from an error message that could be used in further attacks against the system. IBM X-Force ID: 143796.

Affected products and versions

Product Affected versions Fixed in
Rational Team Concert 6.0 6.0 → 6.0.6 No fix stated
Rational Team Concert 5.02 No fix stated
Rational Team Concert 5.01 No fix stated
Rational Team Concert 5.0 No fix stated
Rational Software Architect Design Manager 6.0 6.0 → 6.0.1 No fix stated
Rational Software Architect Design Manager 5.02 No fix stated
Rational Software Architect Design Manager 5.01 No fix stated
Rational Software Architect Design Manager 5.0 No fix stated
Rational DOORS Next Generation 6.0 6.0 → 6.0.6 No fix stated
Show the 19 other branches
Product Affected versions Fixed in
Rational DOORS Next Generation 5.02 No fix stated
Rational DOORS Next Generation 5.01 No fix stated
Rational DOORS Next Generation 5.0 No fix stated
Rational Collaborative Lifecycle Management 6.0 6.0 → 6.0.6 No fix stated
Rational Collaborative Lifecycle Management 5.02 No fix stated
Rational Collaborative Lifecycle Management 5.01 No fix stated
Rational Collaborative Lifecycle Management 5.0 No fix stated
Rational Rhapsody Design Manager 6.0 6.0 → 6.0.6 No fix stated
Rational Rhapsody Design Manager 5.02 No fix stated
Rational Rhapsody Design Manager 5.01 No fix stated
Rational Rhapsody Design Manager 5.0 No fix stated
Rational Quality Manager 6.0 6.0 → 6.0.6 No fix stated
Rational Quality Manager 5.02 No fix stated
Rational Quality Manager 5.01 No fix stated
Rational Quality Manager 5.0 No fix stated
Rational Engineering Lifecycle Manager 6.0 6.0 → 6.0.6 No fix stated
Rational Engineering Lifecycle Manager 5.02 No fix stated
Rational Engineering Lifecycle Manager 5.01 No fix stated
Rational Engineering Lifecycle Manager 5.0 No fix stated

Other CVEs of Rational Team Concert

The 72 CVEs of Rational Team Concert →
CVE-2020-4989 IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 and IBM Rational Team Concert 6.0.6 and 6.0.0.1 could allow an… 4.3 Medium CVE-2021-29701 IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could… 4.3 Medium CVE-2021-29844 IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF) 5.4 Medium CVE-2021-29786 IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user 6.5 Medium
Track this CVE