Description
IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Quality Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Rhapsody Design Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Software Architect Design Manager 5.0 through 5.02 and 6.0 through 6.0.1, IBM Rational Team Concert 5.0 through 5.02 and 6.0 through 6.0.6) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 145609.
CVSS breakdown
CVSS 3.0
Availability
None
Attack Complexity
High
Attack Vector
Network
Confidentiality
High
Integrity
None
Privileges Required
None
Scope
Unchanged
User Interaction
None
E
Unchanged
RC
Changed
RL
O
Affected products
- ibm / Rational Collaborative Lifecycle Management5.0 – 5.0
- ibm / Rational Collaborative Lifecycle Management5.02 – 5.02
- ibm / Rational Collaborative Lifecycle Management5.01 – 5.01
- ibm / Rational Collaborative Lifecycle Management6.0.6 – 6.0.6
- ibm / Rational Collaborative Lifecycle Management6.0.5 – 6.0.5
- ibm / Rational Collaborative Lifecycle Management6.0.4 – 6.0.4
- ibm / Rational Collaborative Lifecycle Management6.0.3 – 6.0.3
- ibm / Rational Collaborative Lifecycle Management6.0.2 – 6.0.2
- ibm / Rational Collaborative Lifecycle Management6.0.1 – 6.0.1
- ibm / Rational Collaborative Lifecycle Management6.0 – 6.0
- ibm / Rational DOORS Next Generation6.0.3 – 6.0.3
- ibm / Rational DOORS Next Generation5.02 – 5.02
- ibm / Rational DOORS Next Generation5.01 – 5.01
- ibm / Rational DOORS Next Generation6.0.6 – 6.0.6
- ibm / Rational DOORS Next Generation6.0.5 – 6.0.5
- ibm / Rational DOORS Next Generation5.0 – 5.0
- ibm / Rational DOORS Next Generation6.0 – 6.0
- ibm / Rational DOORS Next Generation6.0.1 – 6.0.1
- ibm / Rational DOORS Next Generation6.0.2 – 6.0.2
- ibm / Rational DOORS Next Generation6.0.4 – 6.0.4
- ibm / Rational Engineering Lifecycle Manager5.02 – 5.02
- ibm / Rational Engineering Lifecycle Manager5.0 – 5.0
- ibm / Rational Engineering Lifecycle Manager6.0 – 6.0
- ibm / Rational Engineering Lifecycle Manager6.0.1 – 6.0.1
- ibm / Rational Engineering Lifecycle Manager6.0.2 – 6.0.2
- ibm / Rational Engineering Lifecycle Manager6.0.3 – 6.0.3
- ibm / Rational Engineering Lifecycle Manager6.0.4 – 6.0.4
- ibm / Rational Engineering Lifecycle Manager6.0.5 – 6.0.5
- ibm / Rational Engineering Lifecycle Manager6.0.6 – 6.0.6
- ibm / Rational Engineering Lifecycle Manager5.01 – 5.01
- ibm / Rational Quality Manager6.0.4 – 6.0.4
- ibm / Rational Quality Manager5.02 – 5.02
- ibm / Rational Quality Manager5.01 – 5.01
- ibm / Rational Quality Manager6.0.6 – 6.0.6
- ibm / Rational Quality Manager6.0.5 – 6.0.5
- ibm / Rational Quality Manager5.0 – 5.0
- ibm / Rational Quality Manager6.0 – 6.0
- ibm / Rational Quality Manager6.0.1 – 6.0.1
- ibm / Rational Quality Manager6.0.2 – 6.0.2
- ibm / Rational Quality Manager6.0.3 – 6.0.3
- ibm / Rational Rhapsody Design Manager6.0.6 – 6.0.6
- ibm / Rational Rhapsody Design Manager6.0 – 6.0
- ibm / Rational Rhapsody Design Manager6.0.1 – 6.0.1
- ibm / Rational Rhapsody Design Manager6.0.2 – 6.0.2
- ibm / Rational Rhapsody Design Manager6.0.3 – 6.0.3
- ibm / Rational Rhapsody Design Manager6.0.4 – 6.0.4
- ibm / Rational Rhapsody Design Manager6.0.5 – 6.0.5
- ibm / Rational Rhapsody Design Manager5.0 – 5.0
- ibm / Rational Rhapsody Design Manager5.01 – 5.01
- ibm / Rational Rhapsody Design Manager5.02 – 5.02
- ibm / Rational Software Architect Design Manager5.0 – 5.0
- ibm / Rational Software Architect Design Manager6.0 – 6.0
- ibm / Rational Software Architect Design Manager6.0.1 – 6.0.1
- ibm / Rational Software Architect Design Manager5.01 – 5.01
- ibm / Rational Software Architect Design Manager5.02 – 5.02
- ibm / Rational Team Concert6.0.5 – 6.0.5
- ibm / Rational Team Concert6.0.3 – 6.0.3
- ibm / Rational Team Concert6.0.2 – 6.0.2
- ibm / Rational Team Concert6.0.1 – 6.0.1
- ibm / Rational Team Concert6.0 – 6.0
- ibm / Rational Team Concert5.0 – 5.0
- ibm / Rational Team Concert5.02 – 5.02
- ibm / Rational Team Concert5.01 – 5.01
- ibm / Rational Team Concert6.0.6 – 6.0.6
- ibm / Rational Team Concert6.0.4 – 6.0.4