VulnerabilityModified
CVE-2017-1602
IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to using a specially crafted URL.
MEDIUM 4.3EPSS 1.18%
Does this matter?
Lower severity and a low EPSS score (1.18%). Track it; it rarely justifies an emergency change on its own.
Description
IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to using a specially crafted URL. IBM X-Force ID: 132625.
- CVSS 3.0
- 4.3 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- EPSS
- 1.18% probability · 66th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-552
- Affected
- ibm/rational collaborative lifecycle management · ibm/rational quality manager · ibm/rational team concert · ibm/rational doors next generation · ibm/rational engineering lifecycle manager · ibm/rational rhapsody design manager · ibm/rational software architect design manager
- Source
- psirt@us.ibm.com
References
- http://www.ibm.com/support/docview.wss?uid=swg22014815Patch, Vendor Advisory
- http://www.securityfocus.com/bid/103477Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/132625VDB Entry, Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg22014815Patch, Vendor Advisory
- http://www.securityfocus.com/bid/103477Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/132625VDB Entry, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.