CVE-2017-1701

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

IBM Team Concert (RTC) 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, and 6.0.5 stores credentials for users using a weak encryption algorithm, which could allow an authenticated user to obtain highly sensitive information. IBM X-Force ID: 134393.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-326

Affected software

Vendor	Product	Versions
IBM	Rational Team Concert	5.0; 5.0.2; 5.0.1; 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5

References

http://www.ibm.com/support/docview.wss?uid=swg22015454Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/134393VDB Entry, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22015454Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/134393VDB Entry, Vendor Advisory

Timeline

Published: Apr 23, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-170107.8Untrusted search path vulnerability in Content Manager Assistant for PlayStation version 3.55.7671.0901 and earlier allows an attacker to ga CVE-2017-170208.8On D-Link DCS-5009 devices with firmware 1.08.11 and earlier, DCS-5010 devices with firmware 1.14.09 and earlier, and DCS-5020L devices with CVE-2017-170238.1The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering (www.ncp-e.com). The affected client software, "Sopho CVE-2017-170279.8A buffer overflow vulnerability in FTP service in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) buil CVE-2017-170289.8A buffer overflow vulnerability in external device function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 CVE-2017-170299.8A buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) b CVE-2017-170309.8A buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) b CVE-2017-170319.8A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2 CVE-2017-170329.8A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2 CVE-2017-170339.8A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2 CVE-2017-170427.5lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attac CVE-2017-170436.1The Emag Marketplace Connector plugin 1.0.0 for WordPress has reflected XSS because the parameter "post" to /wp-content/plugins/emag-marketp