CVE-2016-6028 — Corporation Rational Collaborative Lifecycle Management vulnerability

CWE-2643 documents3 sources

Severity

4.3MEDIUMNVD

EPSS

0.2%

top 60.48%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Corporation Rational Collaborative Lifecycle Management IBM Rational Collaborative Lifecycle Management

Timeline

PublishedFeb 1

Latest updateMay 17

Description

IBM Jazz technology based products might allow an attacker to view work item titles that they do not have privilege to view.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶NVDibm/rational_collaborative_lifecycle_management14 versions+13

▶CVEListV5ibm_corporation/rational_collaborative_lifecycle_management17 versions+16

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

GHSA

GHSA-695x-3gmc-3vj9: IBM Jazz technology based products might allow an attacker to view work item titles that they do not have privilege to view↗2022-05-17

▶

CVEList

CVE-2016-6028: IBM Jazz technology based products might allow an attacker to view work item titles that they do not have privilege to view↗2017-02-01

▶