CVE:CVE-2018-1694
CNNVD:CNNVD-201811-062
IBM Rhapsody Model Manager是美国IBM公司的一套协作设计模型管理软件。该软件支持使用中央系统存储库存储、共享、搜索和管理设计模型以及软件自动化的设计评审等。
IBM Rhapsody Model Manager中存在信息泄露漏洞。远程攻击者可通过实施中间人攻击利用该漏洞获取敏感信息。以下产品和版本受到影响：IBM Rational Collaborative Lifecycle Management 5.0至6.0.6版本；Rational Quality Manager 5.0至5.0.2版本和6.0和6.0.6版本；Rational Team Concert 5.0至5.0.2版本和6.0至6.0.6版本Rational DOORS Next Generation 5.0至5.0.2版本和6.0至6.0.6版本；Rational Engineering Lifecycle Manager 5.0至5.0.2版本和6.0至6.0.6版本；Rational Rhapsody Design Manager 5.0至5.0.2版本和6.0至6.0.6版本；Rational Software Architect Design Manager 5.0至5.0.2版本和6.0至6.0.1版本。
solution:Upgrade ibm rational_collaborative_lifecycle_management to a higher version than 6.0.6,and avoid the version [5.0.0,6.0.6]; Upgrade ibm rational_doors_next_generation to a higher version than 5.0.2,6.0.6,and avoid the version [5.0.0,5.0.2],[6.0.0,6.0.6]; Upgrade ibm rational_engineering_lifecycle_manager to a higher version than 5.0.2,6.0.6,and avoid the version [5.0.0,5.0.2],[6.0.0,6.0.6]; Upgrade ibm rational_quality_manager to a higher version than 5.0.2,6.0.6,and avoid the version [5.0.0,5.0.2],[6.0.0,6.0.6]; Upgrade ibm rational_rhapsody_design_manager to a higher version than 5.0.2,6.0.6,and avoid the version [5.0.0,5.0.2],[6.0.0,6.0.6]; Upgrade ibm rational_software_architect_design_manager to a higher version than 5.0.2,6.0.1,and avoid the version [5.0.0,5.0.2],[6.0.0,6.0.1]; Upgrade ibm rational_team_concert to a higher version than 5.0.2,6.0.6,and avoid the version [5.0.0,5.0.2],[6.0.0,6.0.6]