SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2017-1725

IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager…

MEDIUM 4.3EPSS 0.97%

Does this matter?

Lower severity and a low EPSS score (0.97%). Track it; it rarely justifies an emergency change on its own.

Description

IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) contain an undisclosed vulnerability with the potential for information disclosure. IBM X-Force ID: 134820.

CVSS 3.0
4.3 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0.97% probability · 60th percentile
CISA KEV
Not listed
Weakness
CWE-200
Affected
ibm/rational collaborative lifecycle management · ibm/rational doors next generation · ibm/rational engineering lifecycle manager · ibm/rational quality manager · ibm/rational rhapsody design manager · ibm/rational software architect design manager · ibm/rational team concert
Source
psirt@us.ibm.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.