CVE-2017-1191: Medium severity ibm collaborative lifecycle management vulnerability
Published Dec 27, 2017
·Updated
An undisclosed vulnerability in CLM applications (including IBM Rational Collaborative Lifecycle Management 4.0, 5.0, and 6.0) with potential for failure to restrict URL Access. IBM X-Force ID: 123661.
Affected Software
22 affected components
IBM Rational Collaborative Lifecycle Management>=4.0.0<=6.0.4
IBM Rational Quality Manager>=4.0.0<=4.0.7
IBM Rational Quality Manager>=5.0.0<=5.0.2
IBM Rational Quality Manager>=6.0.0<=6.0.4
IBM Rational Team Concert>=4.0.0<=4.0.7
IBM Rational Team Concert>=5.0.0<=5.0.2
IBM Rational Team Concert>=6.0.0<=6.0.4
IBM Rational DOORS Next Generation>=4.0.1<=4.0.7
IBM Rational DOORS Next Generation>=5.0.0<=5.0.2
IBM Rational DOORS Next Generation>=6.0.0<=6.0.4
IBM Rational Engineering Lifecycle Manager>=4.0.3<=4.0.7
IBM Rational Engineering Lifecycle Manager>=5.0.0<=5.0.2
IBM Rational Engineering Lifecycle Manager>=6.0.0<=6.0.4
IBM Rational Rhapsody Design Manager>=4.0.0<=4.0.7
IBM Rational Rhapsody Design Manager>=5.0.0<=5.0.2
IBM Rational Rhapsody Design Manager>=6.0.0<=6.0.4
IBM Rational Software Architect Design Manager>=4.0.0<=4.0.7
IBM Rational Software Architect Design Manager=5.0.0
IBM Rational Software Architect Design Manager=5.0.1
IBM Rational Software Architect Design Manager=5.0.2
IBM Rational Software Architect Design Manager=6.0.0
IBM Rational Software Architect Design Manager=6.0.1
Event History
Dec 27, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2017-1191.
2
Which applications are affected by this vulnerability?
CLM applications, including IBM Rational Collaborative Lifecycle Management 4.0, 5.0, and 6.0, are affected.
3
What is the severity of CVE-2017-1191?
The severity of CVE-2017-1191 is medium with a CVSS score of 4.3.
4
What is the potential impact of this vulnerability?
The vulnerability could result in failure to restrict URL Access.
5
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at the following references: [IBM Support](http://www.ibm.com/support/docview.wss?uid=swg22011815), [IBM X-Force](https://exchange.xforce.ibmcloud.com/vulnerabilities/123661).