CVE-2017-1251

An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker. IBM X-Force ID: 124631...

CVE-2017-1251: Exposure of Sensitive Information to an Unauthorized Actor

An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker. IBM X-Force ID: 124631...

IBM Rational Software Architect Design Manager Information Disclosure Vulnerability

IBM Rational Software Architect RSA Design Manager is a collaborative software design and development platform from IBM based on Jazz technology. The platform supports storing, sharing, and managing software designs and models in a centralized location.CLM Applications is one of the lifecycle...

Design/Logic Flaw

IBM RSA DM contains unspecified vulnerability in CLM Applications with potential for information leakage. IBM X-Force ID: 125157...

CVE-2017-1295

IBM RSA DM contains unspecified vulnerability in CLM Applications with potential for information leakage. IBM X-Force ID: 125157...

CVE-2017-1295

CVE-2017-1295 is listed in IBM’s Jazz/CLM security bulletin as an undisclosed information leakage vulnerability affecting CLM Applications. Affected products/versions include Rational CLM 4.0.x through 6.0.4, Rational Team Concert, Quality Manager, DOORS Next Generation, Engineering Lifecycle Man...

CVE-2016-2981

An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user credentials. IBM Reference : 1999965...

CVE-2016-2981

An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user credentials. IBM Reference : 1999965...

Design/Logic Flaw

An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user credentials. IBM Reference : 1999965...

CVE-2016-2981

An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user credentials. IBM Reference : 1999965...

CVE-2016-2981

The CVE-2016-2981 entry concerns an undisclosed vulnerability in the CLM applications of IBM Jazz Team Server that could allow unauthorized access to user credentials. The IBM bulletin for CLM/Jazz products (Rational Collaboration Lifecycle Management, QMR, RTC, DOORS Next Gen, etc.) lists affect...

CVE-2016-2987

An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker...

Design/Logic Flaw

An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker...

CVE-2016-2987

CVE-2016-2987 is an IBM CLM family information-disclosure issue described as an undisclosed vulnerability that could cause some administrative deployment parameters to be shown to an attacker. Connected IBM bulletin confirms affected products (CLM, RDNG, RELM, RTC, RQM, Rhapsody DM, RSA DM) and p...

CVE-2016-2987

An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker...

CVE-2016-0273

The CVE-2016-0273 entry applies to IBM Jazz-based CLM suite (and related products: RQM, RTC, RDNG, RELM, Rhapsody DM, RSA DM, etc.) with a cross-site scripting vulnerability exploitable by remote authenticated users via a specially crafted URL to inject arbitrary web script/HTML. The root cause i...

CVE-2016-0372

CVE-2016-0372 affects IBM Jazz-based CLM/RTC/RQM and related products. The vulnerability stems from not setting the secure flag on the session cookie in SSL mode, allowing a remote attacker to capture the cookie over HTTP. Impact is cookie exposure, not full remote code execution. Affected versio...

CVE-2016-0284

The CVE-2016-0284 entry relates to an XML External Entity (XXE) vulnerability in the XML parser used by IBM Jazz-based CLM products. Affected products include Rational Collaborative Lifecycle Management (across 3.0.1.6 up to 6.0.2), Rational Quality Manager, Rational Team Concert, Rational DOORS ...

CVE-2015-7470

CVE-2015-7470 affects IBM Jazz Reporting Service (JRS) Report Builder in Rational Insight. Affected versions are JRS 5.0/5.0.1/5.0.2 and 6.0 prior to the indicated fixes. The vulnerability enables a man-in-the-middle attacker to obtain sensitive information (e.g., login information) via unspecifi...

CVE-2015-7467

The CVE-2015-7467 issue affects IBM Jazz Reporting Service (JRS) via the Report Builder component. Affected versions are JRS 5.x prior to 5.0.2-Rational-CLM-ifix011 and 6.0 prior to 6.0.0-Rational-CLM-ifix005. The root cause is cross-site scripting (XSS) due to improper validation of user-supplie...