CVE-2016-6028: Medium severity IBM Rational Collaborative Lifecycle Management vulnerability
Published Feb 1, 2017
·Updated
IBM Jazz technology based products might allow an attacker to view work item titles that they do not have privilege to view.
Affected Software
14 affected components
IBM Rational Collaborative Lifecycle Management=4.0.0
IBM Rational Collaborative Lifecycle Management=4.0.1
IBM Rational Collaborative Lifecycle Management=4.0.2
IBM Rational Collaborative Lifecycle Management=4.0.3
IBM Rational Collaborative Lifecycle Management=4.0.4
IBM Rational Collaborative Lifecycle Management=4.0.5
IBM Rational Collaborative Lifecycle Management=4.0.6
IBM Rational Collaborative Lifecycle Management=4.0.7
IBM Rational Collaborative Lifecycle Management=5.0.0
IBM Rational Collaborative Lifecycle Management=5.0.1
IBM Rational Collaborative Lifecycle Management=5.0.2
IBM Rational Collaborative Lifecycle Management=6.0.0
IBM Rational Collaborative Lifecycle Management=6.0.1
IBM Rational Collaborative Lifecycle Management=6.0.2
Remediation
Patch Available
Event History
Feb 1, 2017
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionWeakness
Data Sourced
via NVD·08:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-6028?
CVE-2016-6028 has a medium severity rating due to its potential to expose sensitive information.
2
How do I fix CVE-2016-6028?
To fix CVE-2016-6028, upgrade to a patched version of IBM Rational Collaborative Lifecycle Management as recommended by IBM.
3
Which versions of IBM Rational Collaborative Lifecycle Management are affected by CVE-2016-6028?
CVE-2016-6028 affects versions 4.0.0 through 6.0.2 of IBM Rational Collaborative Lifecycle Management.
4
What type of attack does CVE-2016-6028 facilitate?
CVE-2016-6028 facilitates unauthorized access where an attacker can view work item titles without proper privileges.
5
Is there a public exploit for CVE-2016-6028?
Currently, there is no known public exploit specifically targeting CVE-2016-6028.