CVE-2017-1103: XEE
IBM Team Concert (RTC) is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM X-Force ID: 120665.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1103?
CVE-2017-1103 is classified as a high severity vulnerability due to its potential to cause a denial of service and expose sensitive information.
How do I fix CVE-2017-1103?
To mitigate CVE-2017-1103, update IBM Rational Team Concert and IBM Rational Quality Manager to the latest patched versions provided by IBM.
What systems are affected by CVE-2017-1103?
CVE-2017-1103 affects multiple versions of IBM Rational Team Concert and IBM Rational Quality Manager from versions 4.0.0 to 6.0.2.
What type of vulnerability is CVE-2017-1103?
CVE-2017-1103 is an XML External Entity Injection (XXE) vulnerability that can lead to denial of service.
Can CVE-2017-1103 be exploited remotely?
Yes, CVE-2017-1103 can be exploited remotely by an attacker to consume system resources or access sensitive information.