CVE-2018-1492: Medium severity ibm collaborative lifecycle management vulnerability
IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to the server's failure to properly log out from the previous session. IBM X-Force ID: 140977.
Affected Software
Event History
Frequently Asked Questions
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2018-1492.
What are the affected products?
The affected products include IBM Rational Collaborative Lifecycle Management, IBM Rational Team Concert, IBM Rational DOORS Next Generation, IBM Rational Quality Manager, IBM Rational Rhapsody Design Manager, IBM Rational Software Architect Design Manager, and IBM Rational Engineering Lifecycle Manager.
What is the severity of CVE-2018-1492?
The severity of CVE-2018-1492 is medium, with a CVSS score of 6.8.
How can an attacker exploit this vulnerability?
An attacker with physical access to the system can log in as another user due to the server's failure to properly log out from the previous session.
Is there a fix available for this vulnerability?
Yes, IBM has released fixes to address this vulnerability. Please refer to the IBM Security Bulletin for specific details.