CVE-2017-1191

An undisclosed vulnerability in CLM applications (including IBM Rational Collaborative Lifecycle Management 4.0, 5.0, and 6.0) with potential for failure to restrict URL Access. IBM X-Force ID: 123661.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
ibmCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 33%
VendorProductVersion
ibmrational_collaborative_lifecycle_management
4.0.0 ≤
𝑥
≤ 6.0.4
ibmrational_quality_manager
4.0.0 ≤
𝑥
≤ 4.0.7
ibmrational_quality_manager
5.0.0 ≤
𝑥
≤ 5.0.2
ibmrational_quality_manager
6.0.0 ≤
𝑥
≤ 6.0.4
ibmrational_team_concert
4.0.0 ≤
𝑥
≤ 4.0.7
ibmrational_team_concert
5.0.0 ≤
𝑥
≤ 5.0.2
ibmrational_team_concert
6.0.0 ≤
𝑥
≤ 6.0.4
ibmrational_doors_next_generation
4.0.1 ≤
𝑥
≤ 4.0.7
ibmrational_doors_next_generation
5.0.0 ≤
𝑥
≤ 5.0.2
ibmrational_doors_next_generation
6.0.0 ≤
𝑥
≤ 6.0.4
ibmrational_engineering_lifecycle_manager
4.0.3 ≤
𝑥
≤ 4.0.7
ibmrational_engineering_lifecycle_manager
5.0.0 ≤
𝑥
≤ 5.0.2
ibmrational_engineering_lifecycle_manager
6.0.0 ≤
𝑥
≤ 6.0.4
ibmrational_rhapsody_design_manager
4.0.0 ≤
𝑥
≤ 4.0.7
ibmrational_rhapsody_design_manager
5.0.0 ≤
𝑥
≤ 5.0.2
ibmrational_rhapsody_design_manager
6.0.0 ≤
𝑥
≤ 6.0.4
ibmrational_software_architect_design_manager
4.0.0 ≤
𝑥
≤ 4.0.7
ibmrational_software_architect_design_manager
5.0.0
ibmrational_software_architect_design_manager
5.0.1
ibmrational_software_architect_design_manager
5.0.2
ibmrational_software_architect_design_manager
6.0.0
ibmrational_software_architect_design_manager
6.0.1
𝑥
= Vulnerable software versions