5.9

CVE-2018-1694

IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Quality Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Rhapsody Design Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Software Architect Design Manager 5.0 through 5.02 and 6.0 through 6.0.1, IBM Rational Team Concert 5.0 through 5.02 and 6.0 through 6.0.6) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 145609.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Rational Collaborative Lifecycle Management Version >= 5.0.0 <= 6.0.6
Ibm ≫ Rational Doors Next Generation Version >= 5.0.0 <= 5.0.2
Ibm ≫ Rational Doors Next Generation Version >= 6.0.0 <= 6.0.6
Ibm ≫ Rational Engineering Lifecycle Manager Version >= 5.0.0 <= 5.0.2
Ibm ≫ Rational Engineering Lifecycle Manager Version >= 6.0.0 <= 6.0.6
Ibm ≫ Rational Quality Manager Version >= 5.0.0 <= 5.0.2
Ibm ≫ Rational Quality Manager Version >= 6.0.0 <= 6.0.6
Ibm ≫ Rational Rhapsody Design Manager Version >= 5.0.0 <= 5.0.2
Ibm ≫ Rational Rhapsody Design Manager Version >= 6.0.0 <= 6.0.6
Ibm ≫ Rational Software Architect Design Manager Version >= 5.0.0 <= 5.0.2
Ibm ≫ Rational Software Architect Design Manager Version >= 6.0.0 <= 6.0.1
Ibm ≫ Rational Team Concert Version >= 5.0.0 <= 5.0.2
Ibm ≫ Rational Team Concert Version >= 6.0.0 <= 6.0.6
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.27% 0.499
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.9 2.2 3.6
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
psirt@us.ibm.com 5.9 2.2 3.6
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N