CVE-2017-1734

MEDIUM

IBM Rational Collaborative Lifecycle Management 5.0-6.0.4 - Authenticated Exposure of Sensitive Information via Cache

Title source: llm

Description

IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) stores potentially sensitive information in a cache that could be read by authenticated users. IBM X-Force ID: 134915.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

http://www.ibm.com/support/docview.wss?uid=swg22015635

VDB Entry, Vendor Advisory vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/134915

Scores

CVSS v3 4.3

EPSS 0.0096

EPSS Percentile 57.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-200

Status published

Products (7)

ibm/rational_collaborative_lifecycle_management 5.0 - 6.0.5

ibm/rational_doors_next_generation 5.0 - 5.0.2

ibm/rational_engineering_lifecycle_manager 5.0 - 5.0.2

ibm/rational_quality_manager 5.0 - 5.0.2

ibm/rational_rhapsody_design_manager 5.0 - 5.0.2

ibm/rational_software_architect_design_manager 5.0 - 5.0.2

ibm/rational_team_concert 5.0 - 5.0.2

Published Apr 24, 2018

Tracked Since Feb 18, 2026