Information disclosure in IBM Rational Team Concert

CVE-2014-3050

IBM Rational Team Concert (RTC) 3.x before 3.0.1.6 IF3 and 4.x before 4.0.7 does not properly integrate with build engines, which allows remote authenticated users to discover credentials via unspecified vectors.

Vulnerability class: Information Disclosure

EPSS: 0.009 (54.5th percentile) — read the EPSS interpretation.

Affected products

Ibm Rational_team_concert — versions 4.0, 4.0.0.1, 4.0.0.2
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@us.ibm.com (vdb-entry, x_refsource_XF)