CVE-2017-1701

EUVD-2017-10717
IBM Team Concert (RTC) 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, and 6.0.5 stores credentials for users using a weak encryption algorithm, which could allow an authenticated user to obtain highly sensitive information. IBM X-Force ID: 134393.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 21%
Affected Products (NVD)
VendorProductVersion
ibmrational_collaborative_lifecycle_management
5.0 ≤
𝑥
≤ 6.0.5
ibmrational_team_concert
5.0 ≤
𝑥
≤ 5.0.2
ibmrational_team_concert
6.0 ≤
𝑥
≤ 6.0.5
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.ibm.com/support/docview.wss?uid=swg22015454
https://exchange.xforce.ibmcloud.com/vulnerabilities/134393
http://www.ibm.com/support/docview.wss?uid=swg22015454
https://exchange.xforce.ibmcloud.com/vulnerabilities/134393