CVE-2016-9700: Infoleak
Published Jul 5, 2017
·Updated
IBM Jazz Foundation could allow an authenticated attacker to obtain sensitive information from error message stack traces. IBM X-Force ID: 119528.
Affected Software
118 affected components
IBM Rational Collaborative Lifecycle Management=4.0
IBM Rational Collaborative Lifecycle Management=4.0.0
IBM Rational Collaborative Lifecycle Management=4.0.1
IBM Rational Collaborative Lifecycle Management=4.0.2
IBM Rational Collaborative Lifecycle Management=4.0.3
IBM Rational Collaborative Lifecycle Management=4.0.4
IBM Rational Collaborative Lifecycle Management=4.0.5
IBM Rational Collaborative Lifecycle Management=4.0.6
IBM Rational Collaborative Lifecycle Management=4.0.7
IBM Rational Collaborative Lifecycle Management=5.0
IBM Rational Collaborative Lifecycle Management=5.0.0
IBM Rational Collaborative Lifecycle Management=5.0.1
IBM Rational Collaborative Lifecycle Management=5.0.2
IBM Rational Collaborative Lifecycle Management=6.0
IBM Rational Collaborative Lifecycle Management=6.0.0
IBM Rational Collaborative Lifecycle Management=6.0.1
IBM Rational Collaborative Lifecycle Management=6.0.3
IBM Rational Quality Manager=4.0
IBM Rational Quality Manager=4.0.0
IBM Rational Quality Manager=4.0.0.1
IBM Rational Quality Manager=4.0.0.2
IBM Rational Quality Manager=4.0.1
IBM Rational Quality Manager=4.0.2
IBM Rational Quality Manager=4.0.3
IBM Rational Quality Manager=4.0.4
IBM Rational Quality Manager=4.0.5
IBM Rational Quality Manager=4.0.6
IBM Rational Quality Manager=4.0.7
IBM Rational Quality Manager=5.0
IBM Rational Quality Manager=5.0.0
IBM Rational Quality Manager=5.0.1
IBM Rational Quality Manager=5.0.2
IBM Rational Quality Manager=6.0.0
IBM Rational Quality Manager=6.0.1
IBM Rational Quality Manager=6.0.2
IBM Rational Quality Manager=6.0.3
IBM Rational Team Concert=4.0
IBM Rational Team Concert=4.0.0
IBM Rational Team Concert=4.0.0.1
IBM Rational Team Concert=4.0.0.2
IBM Rational Team Concert=4.0.1
IBM Rational Team Concert=4.0.2
IBM Rational Team Concert=4.0.3
IBM Rational Team Concert=4.0.4
IBM Rational Team Concert=4.0.5
IBM Rational Team Concert=4.0.6
IBM Rational Team Concert=4.0.7
IBM Rational Team Concert=5.0
IBM Rational Team Concert=5.0.0
IBM Rational Team Concert=5.0.1
IBM Rational Team Concert=5.0.2
IBM Rational Team Concert=6.0
IBM Rational Team Concert=6.0.0
IBM Rational Team Concert=6.0.1
IBM Rational Team Concert=6.0.2
IBM Rational Team Concert=6.0.3
IBM Rational DOORS Next Generation=4.0
IBM Rational DOORS Next Generation=4.0.0
IBM Rational DOORS Next Generation=4.0.1
IBM Rational DOORS Next Generation=4.0.2
IBM Rational DOORS Next Generation=4.0.3
IBM Rational DOORS Next Generation=4.0.4
IBM Rational DOORS Next Generation=4.0.5
IBM Rational DOORS Next Generation=4.0.6
IBM Rational DOORS Next Generation=4.0.7
IBM Rational DOORS Next Generation=5.0
IBM Rational DOORS Next Generation=5.0.0
IBM Rational DOORS Next Generation=5.0.1
IBM Rational DOORS Next Generation=5.0.2
IBM Rational DOORS Next Generation=6.0.0
IBM Rational DOORS Next Generation=6.0.1
IBM Rational DOORS Next Generation=6.0.2
IBM Rational DOORS Next Generation=6.0.3
IBM Rational Engineering Lifecycle Manager=4.0.3
IBM Rational Engineering Lifecycle Manager=4.0.4
IBM Rational Engineering Lifecycle Manager=4.0.5
IBM Rational Engineering Lifecycle Manager=4.0.6
IBM Rational Engineering Lifecycle Manager=4.0.7
IBM Rational Engineering Lifecycle Manager=5.0
IBM Rational Engineering Lifecycle Manager=5.0.0
IBM Rational Engineering Lifecycle Manager=5.0.1
IBM Rational Engineering Lifecycle Manager=5.0.2
IBM Rational Engineering Lifecycle Manager=6.0.0
IBM Rational Engineering Lifecycle Manager=6.0.1
IBM Rational Engineering Lifecycle Manager=6.0.2
IBM Rational Engineering Lifecycle Manager=6.0.3
IBM Rational Rhapsody Design Manager=4.0
IBM Rational Rhapsody Design Manager=4.0.1
IBM Rational Rhapsody Design Manager=4.0.2
IBM Rational Rhapsody Design Manager=4.0.3
IBM Rational Rhapsody Design Manager=4.0.4
IBM Rational Rhapsody Design Manager=4.0.5
IBM Rational Rhapsody Design Manager=4.0.6
IBM Rational Rhapsody Design Manager=4.0.7
IBM Rational Rhapsody Design Manager=5.0
IBM Rational Rhapsody Design Manager=5.0.0
IBM Rational Rhapsody Design Manager=5.0.1
IBM Rational Rhapsody Design Manager=5.0.2
IBM Rational Rhapsody Design Manager=6.0
IBM Rational Rhapsody Design Manager=6.0.0
IBM Rational Rhapsody Design Manager=6.0.1
IBM Rational Rhapsody Design Manager=6.0.2
IBM Rational Rhapsody Design Manager=6.0.3
IBM Rational Software Architect Design Manager=4.0
IBM Rational Software Architect Design Manager=4.0.0
IBM Rational Software Architect Design Manager=4.0.1
IBM Rational Software Architect Design Manager=4.0.2
IBM Rational Software Architect Design Manager=4.0.3
IBM Rational Software Architect Design Manager=4.0.4
IBM Rational Software Architect Design Manager=4.0.5
IBM Rational Software Architect Design Manager=4.0.6
IBM Rational Software Architect Design Manager=4.0.7
IBM Rational Software Architect Design Manager=5.0
IBM Rational Software Architect Design Manager=5.0.0
IBM Rational Software Architect Design Manager=5.0.1
IBM Rational Software Architect Design Manager=5.0.2
IBM Rational Software Architect Design Manager=6.0.0
IBM Rational Software Architect Design Manager=6.0.1
Event History
Jul 5, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-9700?
The severity of CVE-2016-9700 is classified as a moderate vulnerability.
2
How do I fix CVE-2016-9700?
To fix CVE-2016-9700, apply the appropriate patches provided by IBM for the affected versions of their applications.
3
Which IBM products are affected by CVE-2016-9700?
CVE-2016-9700 affects several IBM products including Rational Collaborative Lifecycle Management, Rational Quality Manager, and Rational Team Concert across various versions.
4
What kind of information can be exposed due to CVE-2016-9700?
CVE-2016-9700 can expose sensitive information through error message stack traces accessible to authenticated attackers.
5
Is user authentication required to exploit CVE-2016-9700?
Yes, an attacker must be authenticated to exploit CVE-2016-9700 and access sensitive information.