CVE-2016-2865

EUVD-2016-3938
The GIT Integration component in IBM Rational Team Concert (RTC) 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 and Rational Collaborative Lifecycle Management 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 allows remote authenticated users to obtain sensitive information via a malformed request.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 42%
Affected Products (NVD)
VendorProductVersion
ibmrational_team_concert
5.0.0
ibmrational_team_concert
5.0.1
ibmrational_team_concert
5.0.2
ibmrational_collaborative_lifecycle_management
5.0.0
ibmrational_collaborative_lifecycle_management
5.0.1
ibmrational_collaborative_lifecycle_management
5.0.2
ibmrational_team_concert
6.0.0
ibmrational_team_concert
6.0.1
ibmrational_collaborative_lifecycle_management
6.0.0
ibmrational_collaborative_lifecycle_management
6.0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www-01.ibm.com/support/docview.wss?uid=swg21985865
http://www.securityfocus.com/bid/91680
http://www-01.ibm.com/support/docview.wss?uid=swg21985865
http://www.securityfocus.com/bid/91680