Ibm Rational Collaborative Lifecycle Management vulnerabilities

CVE-2017-1602 [MEDIUM] CWE-552 CVE-2017-1602: IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticate IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to using a specially crafted URL. IBM X-Force ID: 132625.

CVE-2014-6131 [MEDIUM] CWE-200 CVE-2014-6131: IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix5, 4.x before 4.0.7 iFix4, and 5.x before 5.0.2 iFix2; Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix5, 4.x before 4.0.7 iFix4, and 5.x befo

CVE-2015-7471 [MEDIUM] CWE-79 CVE-2015-7471: Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3. Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Quality Manager (RQM) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and

CVE-2017-1725 [MEDIUM] CWE-200 CVE-2017-1725: IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Manageme IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) contain

CVE-2017-1241 [MEDIUM] CWE-200 CVE-2017-1241: An unspecified vulnerability in IBM Jazz Foundation based applications might allow the display of st An unspecified vulnerability in IBM Jazz Foundation based applications might allow the display of stack trace information to an attacker. IBM X-Force ID: 124523.

CVE-2017-1559 [MEDIUM] CWE-200 CVE-2017-1559: Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts v Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests. IBM X-Force ID: 131758.

CVE-2016-6028 [MEDIUM] CWE-264 CVE-2016-6028: IBM Jazz technology based products might allow an attacker to view work item titles that they do not IBM Jazz technology based products might allow an attacker to view work item titles that they do not have privilege to view.

CVE-2017-1191 [MEDIUM] CVE-2017-1191: An undisclosed vulnerability in CLM applications (including IBM Rational Collaborative Lifecycle Man An undisclosed vulnerability in CLM applications (including IBM Rational Collaborative Lifecycle Management 4.0, 5.0, and 6.0) with potential for failure to restrict URL Access. IBM X-Force ID: 123661.

CVE-2018-1606 [MEDIUM] CWE-200 CVE-2018-1606: IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6. IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Quality Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Ratio

CVE-2017-1734 [MEDIUM] CWE-200 CVE-2017-1734: IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Manageme IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) stores

CVE-2017-1570 [MEDIUM] CWE-200 CVE-2017-1570: IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 131852.

CVE-2017-1251 [MEDIUM] CWE-200 CVE-2017-1251: An undisclosed vulnerability in CLM applications may result in some administrative deployment parame An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker. IBM X-Force ID: 124631.

CVE-2020-4964 [MEDIUM] CVE-2020-4964: IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users. IBM X-Force ID: 192419.

CVE-2019-4084 [MEDIUM] CVE-2019-4084: IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) c IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) could allow an authenticated user to obtain sensitive information from CLM Applications that could be used in further attacks against the system. IBM X-Force ID: 157384.

CVE-2020-4487 [MEDIUM] CWE-209 CVE-2020-4487: IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a de IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 181862.

CVE-2020-4544 [MEDIUM] CWE-209 CVE-2020-4544: IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a de IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 183189.

CVE-2017-1509 [MEDIUM] CWE-200 CVE-2017-1509: IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks. IBM X-Force ID: 129719.

CVE-2017-1240 [MEDIUM] CWE-200 CVE-2017-1240: IBM Rhapsody DM products could reveal sensitive information in HTTP 500 Internal Server Error respon IBM Rhapsody DM products could reveal sensitive information in HTTP 500 Internal Server Error responses. IBM X-Force ID: 124359.

CVE-2017-1295 [MEDIUM] CWE-200 CVE-2017-1295: IBM RSA DM contains unspecified vulnerability in CLM Applications with potential for information lea IBM RSA DM contains unspecified vulnerability in CLM Applications with potential for information leakage. IBM X-Force ID: 125157.

CVE-2016-2866 [MEDIUM] CWE-200 CVE-2016-2866: An unspecified vulnerability in IBM Jazz Team Server may disclose some deployment information to an An unspecified vulnerability in IBM Jazz Team Server may disclose some deployment information to an authenticated user.