CVE:CVE-2017-1725
CNNVD:CNNVD-201804-1400
IBM Rational Collaborative Lifecycle Management（CLM）等都是美国IBM公司的产品。IBM Rational Collaborative Lifecycle Management是一套协作化生命周期管理解决方案。Rational DOORS Next Generation（RDNG）是一套需求管理解决方案。Jazz Team Server是其中的一个项目管理工具。
多款IBM产品中的Jazz Team Server存在安全漏洞。攻击者可利用该漏洞获取敏感信息。以下产品和版本受到影响：IBM Rational Collaborative Lifecycle Management 5.0版本至6.0.5版本；Rational Quality Manager 5.0版本至5.0.2版本，6.0版本至6.0.5版本；Rational Team Concert 5.0版本至5.0.2版本，6.0版本至6.0.5版本；Rational DOORS Next Generation 5.0版本至5.0.2版本，6.0版本至6.0.5版本；Rational Engineering Lifecycle Manager 5.0版本至5.0.2版本，6.0版本至6.0.5版本；Rational Rhapsody Design Manager 5.0版本至5.0.2版本，6.0版本至6.0.5版本；Rational Software Architect Design Manager 5.0版本至5.0.2版本，6.0版本至6.0.1版本。
solution:Upgrade ibm rational_collaborative_lifecycle_management to a higher version than 6.0.5,and avoid the version (5.0,6.0.5]; Upgrade ibm rational_doors_next_generation to a higher version than 5.0.2,6.0.5,and avoid the version [5.0,5.0.2],[6.0,6.0.5]; Upgrade ibm rational_engineering_lifecycle_manager to a higher version than 5.0.2,6.0.5,and avoid the version [5.0,5.0.2],[6.0,6.0.5]; Upgrade ibm rational_quality_manager to a higher version than 5.0.2,6.0.5,and avoid the version [5.0,5.0.2],[6.0,6.0.5]; Upgrade ibm rational_rhapsody_design_manager to a higher version than 5.0.2,6.0.5,and avoid the version [5.0,5.0.2],[6.0,6.0.5]; Upgrade ibm rational_software_architect_design_manager to a higher version than 5.0.2,6.0.1,and avoid the version [5.0,5.0.2],[6.0,6.0.1]; Upgrade ibm rational_team_concert to a higher version than 5.0.2,6.0.5,and avoid the version [5.0,5.0.2],[6.0,6.0.5]