CVE-2017-1099: Infoleak
Published Jun 13, 2017
·Updated
IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error conditions. IBM X-Force ID: 120659.
Affected Software
104 affected components
IBM Rational Collaborative Lifecycle Management=4.0
IBM Rational Collaborative Lifecycle Management=4.0.2
IBM Rational Collaborative Lifecycle Management=4.0.3
IBM Rational Collaborative Lifecycle Management=4.0.4
IBM Rational Collaborative Lifecycle Management=4.0.5
IBM Rational Collaborative Lifecycle Management=4.0.6
IBM Rational Collaborative Lifecycle Management=4.0.7
IBM Rational Collaborative Lifecycle Management=5.0
IBM Rational Collaborative Lifecycle Management=5.0.1
IBM Rational Collaborative Lifecycle Management=5.0.2
IBM Rational Collaborative Lifecycle Management=6.0
IBM Rational Collaborative Lifecycle Management=6.0.1
IBM Rational Collaborative Lifecycle Management=6.0.2
IBM Rational Collaborative Lifecycle Management=6.0.3
IBM Rational Quality Manager=4.0
IBM Rational Quality Manager=4.0.1
IBM Rational Quality Manager=4.0.2
IBM Rational Quality Manager=4.0.3
IBM Rational Quality Manager=4.0.4
IBM Rational Quality Manager=4.0.5
IBM Rational Quality Manager=4.0.6
IBM Rational Quality Manager=4.0.7
IBM Rational Quality Manager=5.0
IBM Rational Quality Manager=5.0.1
IBM Rational Quality Manager=5.0.2
IBM Rational Quality Manager=6.0
IBM Rational Quality Manager=6.0.1
IBM Rational Quality Manager=6.0.2
IBM Rational Quality Manager=6.0.3
IBM Rational Team Concert=4.0
IBM Rational Team Concert=4.0.1
IBM Rational Team Concert=4.0.2
IBM Rational Team Concert=4.0.3
IBM Rational Team Concert=4.0.4
IBM Rational Team Concert=4.0.5
IBM Rational Team Concert=4.0.6
IBM Rational Team Concert=4.0.7
IBM Rational Team Concert=5.0
IBM Rational Team Concert=5.0.1
IBM Rational Team Concert=5.0.2
IBM Rational Team Concert=6.0
IBM Rational Team Concert=6.0.1
IBM Rational Team Concert=6.0.2
IBM Rational Team Concert=6.0.3
IBM Rational DOORS Next Generation=4.0
IBM Rational DOORS Next Generation=4.0.1
IBM Rational DOORS Next Generation=4.0.2
IBM Rational DOORS Next Generation=4.0.3
IBM Rational DOORS Next Generation=4.0.4
IBM Rational DOORS Next Generation=4.0.5
IBM Rational DOORS Next Generation=4.0.6
IBM Rational DOORS Next Generation=4.0.7
IBM Rational DOORS Next Generation=5.0
IBM Rational DOORS Next Generation=5.0.1
IBM Rational DOORS Next Generation=5.0.2
IBM Rational DOORS Next Generation=6.0
IBM Rational DOORS Next Generation=6.0.1
IBM Rational DOORS Next Generation=6.0.2
IBM Rational DOORS Next Generation=6.0.3
IBM Rational Engineering Lifecycle Manager=4.0
IBM Rational Engineering Lifecycle Manager=4.0.1
IBM Rational Engineering Lifecycle Manager=4.0.2
IBM Rational Engineering Lifecycle Manager=4.0.3
IBM Rational Engineering Lifecycle Manager=4.0.4
IBM Rational Engineering Lifecycle Manager=4.0.5
IBM Rational Engineering Lifecycle Manager=4.0.6
IBM Rational Engineering Lifecycle Manager=4.0.7
IBM Rational Engineering Lifecycle Manager=5.0
IBM Rational Engineering Lifecycle Manager=5.0.1
IBM Rational Engineering Lifecycle Manager=5.0.2
IBM Rational Engineering Lifecycle Manager=6.0
IBM Rational Engineering Lifecycle Manager=6.0.1
IBM Rational Engineering Lifecycle Manager=6.0.2
IBM Rational Engineering Lifecycle Manager=6.0.3
IBM Rational Rhapsody Design Manager=4.0
IBM Rational Rhapsody Design Manager=4.0.1
IBM Rational Rhapsody Design Manager=4.0.2
IBM Rational Rhapsody Design Manager=4.0.3
IBM Rational Rhapsody Design Manager=4.0.4
IBM Rational Rhapsody Design Manager=4.0.5
IBM Rational Rhapsody Design Manager=4.0.6
IBM Rational Rhapsody Design Manager=4.0.7
IBM Rational Rhapsody Design Manager=5.0
IBM Rational Rhapsody Design Manager=5.0.1
IBM Rational Rhapsody Design Manager=5.0.2
IBM Rational Rhapsody Design Manager=6.0
IBM Rational Rhapsody Design Manager=6.0.1
IBM Rational Rhapsody Design Manager=6.0.2
IBM Rational Rhapsody Design Manager=6.0.3
IBM Rational Software Architect Design Manager=4.0
IBM Rational Software Architect Design Manager=4.0.1
IBM Rational Software Architect Design Manager=4.0.2
IBM Rational Software Architect Design Manager=4.0.3
IBM Rational Software Architect Design Manager=4.0.4
IBM Rational Software Architect Design Manager=4.0.5
IBM Rational Software Architect Design Manager=4.0.6
IBM Rational Software Architect Design Manager=4.0.7
IBM Rational Software Architect Design Manager=5.0
IBM Rational Software Architect Design Manager=5.0.1
IBM Rational Software Architect Design Manager=5.0.2
IBM Rational Software Architect Design Manager=6.0
IBM Rational Software Architect Design Manager=6.0.1
IBM Rational Software Architect Design Manager=6.0.2
IBM Rational Software Architect Design Manager=6.0.3
Event History
Jun 13, 2017
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-1099?
CVE-2017-1099 is classified as having a moderate severity level due to the potential exposure of sensitive information.
2
How do I fix CVE-2017-1099?
To fix CVE-2017-1099, apply the latest updates released by IBM for the affected IBM Jazz Foundation products.
3
Which versions are affected by CVE-2017-1099?
CVE-2017-1099 affects multiple versions of IBM Rational Collaborative Lifecycle Management, IBM Rational Quality Manager, IBM Rational Team Concert, and several others noted in the vulnerability report.
4
What types of information might be exposed due to CVE-2017-1099?
CVE-2017-1099 could potentially expose sensitive information through stack trace error conditions to authenticated users.
5
Who is impacted by CVE-2017-1099?
Organizations using the affected versions of IBM products as mentioned in CVE-2017-1099 may be at risk if they do not apply the necessary security updates.