PT-2016-5293 · Ibm · Ibm Rational Software Architect Design Manager+6

Published 2016-11-25 · Updated 2016-11-28 · CVE-2016-2947

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management versions 4.0 through 4.0.7 before iFix11 IBM Rational Collaborative Lifecycle Management versions 5.0 through 5.0.2 before iFix18 IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.2 before iFix5 Rational Quality Manager versions 4.0 through 4.0.7 before iFix11 Rational Quality Manager versions 5.0 through 5.0.2 before iFix18 Rational Quality Manager versions 6.0 through 6.0.2 before iFix5 Rational Team Concert versions 4.0 through 4.0.7 before iFix11 Rational Team Concert versions 5.0 through 5.0.2 before iFix18 Rational Team Concert versions 6.0 through 6.0.2 before iFix5 Rational DOORS Next Generation versions 4.0 through 4.0.7 before iFix11 Rational DOORS Next Generation versions 5.0 through 5.0.2 before iFix18 Rational DOORS Next Generation versions 6.0 through 6.0.2 before iFix5 Rational Engineering Lifecycle Manager versions 4.x through 4.0.7 before iFix11 Rational Engineering Lifecycle Manager versions 5.0 through 5.0.2 before iFix18 Rational Engineering Lifecycle Manager versions 6.0 through 6.0.2 before iFix5 Rational Rhapsody Design Manager versions 4.0 through 4.0.7 before iFix11 Rational Rhapsody Design Manager versions 5.0 through 5.0.2 before iFix18 Rational Rhapsody Design Manager versions 6.0 through 6.0.2 before iFix5 Rational Software Architect Design Manager versions 4.0 through 4.0.7 before iFix11 Rational Software Architect Design Manager versions 5.0 through 5.0.2 before iFix18 Rational Software Architect Design Manager versions 6.0 through 6.0.2 before iFix5

Description The issue allows remote authenticated users to obtain sensitive information via unspecified vectors.

Recommendations For IBM Rational Collaborative Lifecycle Management versions 4.0 through 4.0.7 before iFix11, apply iFix11. For IBM Rational Collaborative Lifecycle Management versions 5.0 through 5.0.2 before iFix18, apply iFix18. For IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.2 before iFix5, apply iFix5. For Rational Quality Manager versions 4.0 through 4.0.7 before iFix11, apply iFix11. For Rational Quality Manager versions 5.0 through 5.0.2 before iFix18, apply iFix18. For Rational Quality Manager versions 6.0 through 6.0.2 before iFix5, apply iFix5. For Rational Team Concert versions 4.0 through 4.0.7 before iFix11, apply iFix11. For Rational Team Concert versions 5.0 through 5.0.2 before iFix18, apply iFix18. For Rational Team Concert versions 6.0 through 6.0.2 before iFix5, apply iFix5. For Rational DOORS Next Generation versions 4.0 through 4.0.7 before iFix11, apply iFix11. For Rational DOORS Next Generation versions 5.0 through 5.0.2 before iFix18, apply iFix18. For Rational DOORS Next Generation versions 6.0 through 6.0.2 before iFix5, apply iFix5. For Rational Engineering Lifecycle Manager versions 4.x through 4.0.7 before iFix11, apply iFix11. For Rational Engineering Lifecycle Manager versions 5.0 through 5.0.2 before iFix18, apply iFix18. For Rational Engineering Lifecycle Manager versions 6.0 through 6.0.2 before iFix5, apply iFix5. For Rational Rhapsody Design Manager versions 4.0 through 4.0.7 before iFix11, apply iFix11. For Rational Rhapsody Design Manager versions 5.0 through 5.0.2 before iFix18, apply iFix18. For Rational Rhapsody Design Manager versions 6.0 through 6.0.2 before iFix5, apply iFix5. For Rational Software Architect Design Manager versions 4.0 through 4.0.7 before iFix11, apply iFix11. For Rational Software Architect Design Manager versions 5.0 through 5.0.2 before iFix18, apply iFix18. For Rational Software Architect Design Manager versions 6.0 through 6.0.2 before iFix5, apply iFix5.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-2947

Affected Products

Ibm Rational Collaborative Lifecycle Management

Ibm Rational Doors Next Generation

Ibm Rational Engineering Lifecycle Manager

Ibm Rational Quality Manager

Rational Rhapsody Design Manager

Ibm Rational Software Architect Design Manager

Ibm Rational Team Concert

References · 4

• http://www-01.ibm.com/support/docview.wss?uid=swg21991477 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-2947 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-2947 · Security Note
• http://securityfocus.com/bid/94518 · Note