Description
IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) could allow an authenticated user to obtain sensitive information from CLM Applications that could be used in further attacks against the system. IBM X-Force ID: 157384.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=ibm10956525
VDB Entry, Vendor Advisory vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/157384
Scores
CVSS v3
4.3
EPSS
0.0100
EPSS Percentile
59.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Details
Status
published
Products (7)
ibm/rational_collaborative_lifecycle_management
6.0 - 6.0.6.1
ibm/rational_doors_next_generation
6.0 - 6.0.6.1
ibm/rational_engineering_lifecycle_manager
6.0 - 6.0.6.1
ibm/rational_quality_manager
6.0 - 6.0.6.1
ibm/rational_rhapsody_design_manager
6.0 - 6.0.6.1
ibm/rational_software_architect_design_manager
6.0 - 6.0.1
ibm/rational_team_concert
6.0 - 6.0.6.1
Published
Jun 27, 2019
Tracked Since
Feb 18, 2026