First published: Wed Feb 01 2017(Updated: )
An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Rational DOORS Next Generation | =4.0 | |
IBM Rational DOORS Next Generation | =4.0.0 | |
IBM Rational DOORS Next Generation | =4.0.1 | |
IBM Rational DOORS Next Generation | =4.0.2 | |
IBM Rational DOORS Next Generation | =4.0.3 | |
IBM Rational DOORS Next Generation | =4.0.4 | |
IBM Rational DOORS Next Generation | =4.0.5 | |
IBM Rational DOORS Next Generation | =4.0.6 | |
IBM Rational DOORS Next Generation | =4.0.7 | |
IBM Rational DOORS Next Generation | =5.0 | |
IBM Rational DOORS Next Generation | =5.0.0 | |
IBM Rational DOORS Next Generation | =5.0.1 | |
IBM Rational DOORS Next Generation | =5.0.2 | |
IBM Rational DOORS Next Generation | =6.0.0 | |
IBM Rational DOORS Next Generation | =6.0.1 | |
IBM Rational DOORS Next Generation | =6.0.2 | |
IBM Engineering Lifecycle Manager | =4.0.3 | |
IBM Engineering Lifecycle Manager | =4.0.4 | |
IBM Engineering Lifecycle Manager | =4.0.5 | |
IBM Engineering Lifecycle Manager | =4.0.6 | |
IBM Engineering Lifecycle Manager | =4.0.7 | |
IBM Engineering Lifecycle Manager | =5.0 | |
IBM Engineering Lifecycle Manager | =5.0.0 | |
IBM Engineering Lifecycle Manager | =5.0.1 | |
IBM Engineering Lifecycle Manager | =5.0.2 | |
IBM Engineering Lifecycle Manager | =6.0.0 | |
IBM Engineering Lifecycle Manager | =6.0.1 | |
IBM Engineering Lifecycle Manager | =6.0.2 | |
IBM Rational Quality Manager | =4.0.0 | |
IBM Rational Quality Manager | =4.0.0.1 | |
IBM Rational Quality Manager | =4.0.0.2 | |
IBM Rational Quality Manager | =4.0.1 | |
IBM Rational Quality Manager | =4.0.2 | |
IBM Rational Quality Manager | =4.0.3 | |
IBM Rational Quality Manager | =4.0.4 | |
IBM Rational Quality Manager | =4.0.5 | |
IBM Rational Quality Manager | =4.0.6 | |
IBM Rational Quality Manager | =4.0.7 | |
IBM Rational Quality Manager | =5.0 | |
IBM Rational Quality Manager | =5.0.0 | |
IBM Rational Quality Manager | =5.0.1 | |
IBM Rational Quality Manager | =5.0.2 | |
IBM Rational Quality Manager | =6.0.2 | |
IBM Rhapsody Design Manager | =4.0 | |
IBM Rhapsody Design Manager | =4.0.1 | |
IBM Rhapsody Design Manager | =4.0.2 | |
IBM Rhapsody Design Manager | =4.0.3 | |
IBM Rhapsody Design Manager | =4.0.4 | |
IBM Rhapsody Design Manager | =4.0.5 | |
IBM Rhapsody Design Manager | =4.0.6 | |
IBM Rhapsody Design Manager | =4.0.7 | |
IBM Rhapsody Design Manager | =5.0 | |
IBM Rhapsody Design Manager | =5.0.0 | |
IBM Rhapsody Design Manager | =5.0.1 | |
IBM Rhapsody Design Manager | =5.0.2 | |
IBM Rhapsody Design Manager | =6.0 | |
IBM Rhapsody Design Manager | =6.0.0 | |
IBM Rhapsody Design Manager | =6.0.1 | |
IBM Rhapsody Design Manager | =6.0.2 | |
IBM Rational Software Architect Design Manager | =4.0 | |
IBM Rational Software Architect Design Manager | =4.0.0 | |
IBM Rational Software Architect Design Manager | =4.0.1 | |
IBM Rational Software Architect Design Manager | =4.0.2 | |
IBM Rational Software Architect Design Manager | =4.0.3 | |
IBM Rational Software Architect Design Manager | =4.0.4 | |
IBM Rational Software Architect Design Manager | =4.0.5 | |
IBM Rational Software Architect Design Manager | =4.0.6 | |
IBM Rational Software Architect Design Manager | =4.0.7 | |
IBM Rational Software Architect Design Manager | =5.0 | |
IBM Rational Software Architect Design Manager | =5.0.0 | |
IBM Rational Software Architect Design Manager | =5.0.1 | |
IBM Rational Software Architect Design Manager | =5.0.2 | |
IBM Rational Software Architect Design Manager | =6.0.0 | |
IBM Rational Software Architect Design Manager | =6.0.1 | |
IBM Rational Software Architect Design Manager | =6.0.2 | |
IBM Rational Team Concert | =4.0 | |
IBM Rational Team Concert | =4.0.0 | |
IBM Rational Team Concert | =4.0.0.1 | |
IBM Rational Team Concert | =4.0.0.2 | |
IBM Rational Team Concert | =4.0.1 | |
IBM Rational Team Concert | =4.0.2 | |
IBM Rational Team Concert | =4.0.3 | |
IBM Rational Team Concert | =4.0.4 | |
IBM Rational Team Concert | =4.0.5 | |
IBM Rational Team Concert | =4.0.6 | |
IBM Rational Team Concert | =4.0.7 | |
IBM Rational Team Concert | =5.0 | |
IBM Rational Team Concert | =5.0.1 | |
IBM Rational Team Concert | =5.0.2 | |
IBM Rational Team Concert | =6.0 | |
IBM Rational Team Concert | =6.0.1 | |
IBM Rational Team Concert | =6.0.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-2987 has a severity rating that indicates a potential risk of administrative deployment parameters being accessible by an attacker.
To fix CVE-2016-2987, apply the latest software updates and patches provided by IBM for affected versions of Rational DOORS and related applications.
CVE-2016-2987 affects multiple versions of IBM Rational DOORS, IBM Engineering Lifecycle Manager, IBM Rational Quality Manager, and IBM Rational Team Concert.
Yes, CVE-2016-2987 may allow an attacker to view sensitive administrative parameters, potentially leading to further exploitation of the system.
There is no official workaround specified for CVE-2016-2987; applying the security patches is recommended to mitigate the vulnerability.