Information disclosure in Ibm Rational Collaborative Lifecycle Management
CVE-2018-1606
IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Engineering Lifecycle Manager 5.0…
Vulnerability class: Information Disclosure
EPSS: 0.010 (58.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Ibm Rational Collaborative Lifecycle Management — versions 6.0.2, 5.02, 6.0.6
- Ibm Rational_collaborative_lifecycle_management
- Ibm Rational Doors Next Generation — versions 6.0.2, 5.02, 6.0.6
- Ibm Rational_doors_next_generation
- Ibm Rational Engineering Lifecycle Manager — versions 6.0.2, 5.02, 6.0.6
- Ibm Rational_engineering_lifecycle_manager
- Ibm Rational Quality Manager — versions 6.0.2, 5.02, 6.0.6
- Ibm Rational_quality_manager
- Ibm Rational Rhapsody Design Manager — versions 6.0.2, 5.02, 6.0.6
- Ibm Rational_rhapsody_design_manager
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@us.ibm.com (VDB Entry, vdb-entry, Vendor Advisory, x_refsource_XF)
Frequently asked questions
- What is CVE-2018-1606?
- CVE-2018-1606 is a medium-severity vulnerability in Ibm Rational Collaborative Lifecycle Management, classified under Information Disclosure. CVSS score: 4.3/10. Published 2018-11-06.
- How severe is CVE-2018-1606?
- Medium severity. CVSS v3 base score is 4.3 out of 10.