CVE-2017-1240: Infoleak
Published Nov 27, 2017
·Updated
IBM Rhapsody DM products could reveal sensitive information in HTTP 500 Internal Server Error responses. IBM X-Force ID: 124359.
Affected Software
108 affected components
IBM Rational Quality Manager=4.0
IBM Rational Quality Manager=4.0.0.1
IBM Rational Quality Manager=4.0.0.2
IBM Rational Quality Manager=4.0.1
IBM Rational Quality Manager=4.0.2
IBM Rational Quality Manager=4.0.3
IBM Rational Quality Manager=4.0.4
IBM Rational Quality Manager=4.0.5
IBM Rational Quality Manager=4.0.6
IBM Rational Quality Manager=4.0.7
IBM Rational Quality Manager=5.0
IBM Rational Quality Manager=5.0.1
IBM Rational Quality Manager=5.0.2
IBM Rational Quality Manager=6.0
IBM Rational Quality Manager=6.0.1
IBM Rational Quality Manager=6.0.2
IBM Rational Quality Manager=6.0.3
IBM Rational Quality Manager=6.0.4
IBM Rational Team Concert=4.0
IBM Rational Team Concert=4.0.0.1
IBM Rational Team Concert=4.0.0.2
IBM Rational Team Concert=4.0.1
IBM Rational Team Concert=4.0.2
IBM Rational Team Concert=4.0.3
IBM Rational Team Concert=4.0.4
IBM Rational Team Concert=4.0.5
IBM Rational Team Concert=4.0.6
IBM Rational Team Concert=4.0.7
IBM Rational Team Concert=5.0
IBM Rational Team Concert=5.0.1
IBM Rational Team Concert=5.0.2
IBM Rational Team Concert=6.0
IBM Rational Team Concert=6.0.1
IBM Rational Team Concert=6.0.2
IBM Rational Team Concert=6.0.3
IBM Rational Team Concert=6.0.4
IBM Rational DOORS Next Generation=4.0.1
IBM Rational DOORS Next Generation=4.0.2
IBM Rational DOORS Next Generation=4.0.3
IBM Rational DOORS Next Generation=4.0.4
IBM Rational DOORS Next Generation=4.0.5
IBM Rational DOORS Next Generation=4.0.6
IBM Rational DOORS Next Generation=4.0.7
IBM Rational DOORS Next Generation=5.0
IBM Rational DOORS Next Generation=5.0.1
IBM Rational DOORS Next Generation=5.0.2
IBM Rational DOORS Next Generation=6.0
IBM Rational DOORS Next Generation=6.0.1
IBM Rational DOORS Next Generation=6.0.2
IBM Rational DOORS Next Generation=6.0.3
IBM Rational DOORS Next Generation=6.0.4
IBM Rational Engineering Lifecycle Manager=4.0.3
IBM Rational Engineering Lifecycle Manager=4.0.4
IBM Rational Engineering Lifecycle Manager=4.0.5
IBM Rational Engineering Lifecycle Manager=4.0.6
IBM Rational Engineering Lifecycle Manager=4.0.7
IBM Rational Engineering Lifecycle Manager=5.0
IBM Rational Engineering Lifecycle Manager=5.0.1
IBM Rational Engineering Lifecycle Manager=5.0.2
IBM Rational Engineering Lifecycle Manager=6.0
IBM Rational Engineering Lifecycle Manager=6.0.1
IBM Rational Engineering Lifecycle Manager=6.0.2
IBM Rational Engineering Lifecycle Manager=6.0.3
IBM Rational Engineering Lifecycle Manager=6.0.4
IBM Rational Rhapsody Design Manager=4.0
IBM Rational Rhapsody Design Manager=4.0.1
IBM Rational Rhapsody Design Manager=4.0.2
IBM Rational Rhapsody Design Manager=4.0.3
IBM Rational Rhapsody Design Manager=4.0.4
IBM Rational Rhapsody Design Manager=4.0.5
IBM Rational Rhapsody Design Manager=4.0.6
IBM Rational Rhapsody Design Manager=4.0.7
IBM Rational Rhapsody Design Manager=5.0
IBM Rational Rhapsody Design Manager=5.0.1
IBM Rational Rhapsody Design Manager=5.0.2
IBM Rational Rhapsody Design Manager=6.0
IBM Rational Rhapsody Design Manager=6.0.1
IBM Rational Rhapsody Design Manager=6.0.2
IBM Rational Rhapsody Design Manager=6.0.3
IBM Rational Rhapsody Design Manager=6.0.4
IBM Rational Software Architect Design Manager=4.0
IBM Rational Software Architect Design Manager=4.0.1
IBM Rational Software Architect Design Manager=4.0.2
IBM Rational Software Architect Design Manager=4.0.3
IBM Rational Software Architect Design Manager=4.0.4
IBM Rational Software Architect Design Manager=4.0.5
IBM Rational Software Architect Design Manager=4.0.6
IBM Rational Software Architect Design Manager=4.0.7
IBM Rational Software Architect Design Manager=5.0
IBM Rational Software Architect Design Manager=5.0.1
IBM Rational Software Architect Design Manager=5.0.2
IBM Rational Software Architect Design Manager=6.0
IBM Rational Software Architect Design Manager=6.0.1
IBM Rational Collaborative Lifecycle Management=4.0
IBM Rational Collaborative Lifecycle Management=4.0.1
IBM Rational Collaborative Lifecycle Management=4.0.2
IBM Rational Collaborative Lifecycle Management=4.0.3
IBM Rational Collaborative Lifecycle Management=4.0.4
IBM Rational Collaborative Lifecycle Management=4.0.5
IBM Rational Collaborative Lifecycle Management=4.0.6
IBM Rational Collaborative Lifecycle Management=4.0.7
IBM Rational Collaborative Lifecycle Management=5.0
IBM Rational Collaborative Lifecycle Management=5.0.1
IBM Rational Collaborative Lifecycle Management=5.0.2
IBM Rational Collaborative Lifecycle Management=6.0
IBM Rational Collaborative Lifecycle Management=6.0.1
IBM Rational Collaborative Lifecycle Management=6.0.3
IBM Rational Collaborative Lifecycle Management=6.0.4
Event History
Nov 27, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-1240?
The severity of CVE-2017-1240 is categorized as high due to the potential exposure of sensitive information.
2
How do I fix CVE-2017-1240?
To fix CVE-2017-1240, apply the latest patches and updates provided by IBM for the affected Rhapsody DM products.
3
Which IBM products are affected by CVE-2017-1240?
CVE-2017-1240 affects various versions of IBM Rational Quality Manager, Rational Team Concert, and Rhapsody products.
4
What kind of information could be exposed due to CVE-2017-1240?
CVE-2017-1240 could expose sensitive information in HTTP 500 Internal Server Error responses.
5
Who should be alerted about CVE-2017-1240?
System administrators and security teams managing IBM Rhapsody DM products should be alerted to CVE-2017-1240.