Skip to content
Sign in
4.3 Medium

CVE-2018-1423 IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in…

Description

IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in further attacks against the system. IBM X-Force ID: 139026.

Affected products and versions

Product Affected versions Fixed in
Rational Collaborative Lifecycle Management 6.0 6.0 → 6.0.5 No fix stated
Rational Collaborative Lifecycle Management 5.0 5.0 → 5.0.2 No fix stated
Rational DOORS Next Generation 6.0 6.0 → 6.0.5 No fix stated
Rational DOORS Next Generation 5.0 5.0 → 5.0.2 No fix stated
Rational Rhapsody Design Manager 6.0 6.0 → 6.0.5 No fix stated
Rational Rhapsody Design Manager 5.0 5.0 → 5.0.2 No fix stated
Rational Quality Manager 6.0 6.0 → 6.0.5 No fix stated
Rational Quality Manager 5.0 5.0 → 5.0.2 No fix stated
Rational Engineering Lifecycle Manager 6.0 6.0 → 6.0.5 No fix stated
Show the 5 other branches
Product Affected versions Fixed in
Rational Engineering Lifecycle Manager 5.0 5.0 → 5.0.2 No fix stated
Rational Software Architect Design Manager 6.0 6.0 → 6.0.1 No fix stated
Rational Software Architect Design Manager 5.0 5.0 → 5.0.2 No fix stated
Rational Team Concert 6.0 6.0 → 6.0.5 No fix stated
Rational Team Concert 5.0 5.0 → 5.0.2 No fix stated

Other CVEs of Rational Collaborative Lifecycle Management

The 114 CVEs of Rational Collaborative Lifecycle Management →
CVE-2021-29844 IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF) 5.4 Medium CVE-2021-29786 IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user 6.5 Medium CVE-2021-29774 IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain… 7.5 High CVE-2021-29713 IBM Jazz Team Server products are vulnerable to cross-site scripting 5.4 Medium
Track this CVE