description: IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Quality Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Rhapsody Design Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Software Architect Design Manager 5.0 through 5.02 and 6.0 through 6.0.1, IBM Rational Team Concert 5.0 through 5.02 and 6.0 through 6.0.6) could allow an authenticated user to obtain sensitive information from an error message that could be used in further attacks against the system. IBM X-Force ID: 143796.
problem types: Obtain Information
affected:
{
product: Rational Team Concert
vendor: IBM
versions:
status: affected, version: 5.0
status: affected, version: 6.0
status: affected, version: 6.0.1
status: affected, version: 6.0.2
status: affected, version: 6.0.3
status: affected, version: 6.0.4
status: affected, version: 6.0.5
status: affected, version: 6.0.6
status: affected, version: 5.01
status: affected, version: 5.02
}
{
product: Rational Software Architect Design Manager
vendor: IBM
versions:
status: affected, version: 5.0
status: affected, version: 6.0
status: affected, version: 6.0.1
status: affected, version: 5.01
status: affected, version: 5.02
}
{
product: Rational DOORS Next Generation
vendor: IBM
versions:
status: affected, version: 5.0
status: affected, version: 6.0
status: affected, version: 6.0.1
status: affected, version: 6.0.2
status: affected, version: 6.0.3
status: affected, version: 6.0.4
status: affected, version: 6.0.5
status: affected, version: 6.0.6
status: affected, version: 5.01
status: affected, version: 5.02
}
{
product: Rational Collaborative Lifecycle Management
vendor: IBM
versions:
status: affected, version: 5.0
status: affected, version: 6.0
status: affected, version: 6.0.1
status: affected, version: 6.0.2
status: affected, version: 6.0.3
status: affected, version: 6.0.4
status: affected, version: 6.0.5
status: affected, version: 6.0.6
status: affected, version: 5.01
status: affected, version: 5.02
}
{
product: Rational Rhapsody Design Manager
vendor: IBM
versions:
status: affected, version: 5.0
status: affected, version: 6.0
status: affected, version: 6.0.1
status: affected, version: 6.0.2
status: affected, version: 6.0.3
status: affected, version: 6.0.4
status: affected, version: 6.0.5
status: affected, version: 6.0.6
status: affected, version: 5.01
status: affected, version: 5.02
}
{
product: Rational Quality Manager
vendor: IBM
versions:
status: affected, version: 5.0
status: affected, version: 6.0
status: affected, version: 6.0.1
status: affected, version: 6.0.2
status: affected, version: 6.0.3
status: affected, version: 6.0.4
status: affected, version: 6.0.5
status: affected, version: 6.0.6
status: affected, version: 5.01
status: affected, version: 5.02
}
{
product: Rational Engineering Lifecycle Manager
vendor: IBM
versions:
status: affected, version: 5.0
status: affected, version: 6.0
status: affected, version: 6.0.1
status: affected, version: 6.0.2
status: affected, version: 6.0.3
status: affected, version: 6.0.4
status: affected, version: 6.0.5
status: affected, version: 6.0.6
status: affected, version: 5.01
status: affected, version: 5.02
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
exploitCodeMaturity: UNPROVEN
integrityImpact: NONE
privilegesRequired: LOW
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 3.8
temporalSeverity: LOW
userInteraction: NONE
vectorString: CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O
version: 3.0
]