CVE-2017-1734

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) stores potentially sensitive information in a cache that could be read by authenticated users. IBM X-Force ID: 134915.

Metrics

CVSS 3.0 4.3/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
IBM	Rational Engineering Lifecycle Manager	5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5
IBM	Rational Quality Manager	5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5
IBM	Rational Rhapsody Design Manager	5.0; 5.0.2; 5.0.1; 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5
IBM	Rational Collaborative Lifecycle Management	5.0; 5.0.1; 5.0.2; 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5
IBM	Rational DOORS Next Generation	5.0.2; 5.0; 5.0.1; 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5
IBM	Rational Team Concert	5.0; 5.0.2; 5.0.1; 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5
IBM	Rational Software Architect Design Manager	5.0; 5.0.2; 5.0.1; 6.0; 6.0.1

References

http://www.ibm.com/support/docview.wss?uid=swg22015635Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/134915VDB Entry, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22015635Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/134915VDB Entry, Vendor Advisory

Timeline

Published: Apr 24, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-17385.4IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 contains an undisclosed vulnerability that would allow an authenticated CVE-2017-173816.5The Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service (divide-by-zero error and QEMU process cras CVE-2017-173825.9Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before b CVE-2017-173834.7Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job configuration form, CVE-2017-173848.8ISPConfig 3.x before 3.1.9 allows remote authenticated users to obtain root access by creating a crafted cron job.CVE-2017-17395.4IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to CVE-2017-17405.4IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows u CVE-2017-174058.8Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kerne CVE-2017-174069.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authenticati CVE-2017-174079.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager v7.2.CVE-2017-174088.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User CVE-2017-174098.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018. User