CVE-2018-1606

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2018-1606
IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Quality Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Rhapsody Design Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Software Architect Design Manager 5.0 through 5.02 and 6.0 through 6.0.1, IBM Rational Team Concert 5.0 through 5.02 and 6.0 through 6.0.6) could allow an authenticated user to obtain sensitive information from an error message that could be used in further attacks against the system. IBM X-Force ID: 143796.

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector : AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

4.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://www.ibm.com/support/docview.wss?uid=ibm10738301 Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/143796 VDB Entry Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=ibm10738301 Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/143796 VDB Entry Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*
History

21 Nov 2024, 04:00

Type Values Removed Values Added
References () http://www.ibm.com/support/docview.wss?uid=ibm10738301 - Vendor Advisory, Patch () http://www.ibm.com/support/docview.wss?uid=ibm10738301 - Patch, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/143796 - VDB Entry, Vendor Advisory () https://exchange.xforce.ibmcloud.com/vulnerabilities/143796 - VDB Entry, Vendor Advisory
Information

Published : 2018-11-06 16:29

Updated : 2024-11-21 04:00

NVD link : CVE-2018-1606

Mitre link : CVE-2018-1606

CVE.ORG link : CVE-2018-1606

JSON object : View

Products Affected

ibm

  • rational_quality_manager
  • rational_team_concert
  • rational_engineering_lifecycle_manager
  • rational_software_architect_design_manager
  • rational_rhapsody_design_manager
  • rational_doors_next_generation
  • rational_collaborative_lifecycle_management
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor