CVE:CVE-2018-1606
CNNVD:CNNVD-201811-061
IBM Rational Collaborative Lifecycle Management等都是美国IBM公司的产品。IBM Rational Collaborative Lifecycle Management是一套协作化生命周期管理解决方案。Rational Quality Manager是一套协作的、基于Web的质量管理解决方案。IBM Jazz是其中的一个软件开发协作平台。
多款基于IBM Jazz的应用程序中存在安全漏洞。攻击者可利用该漏洞从错误消息中获取敏感信息。IBM Rational Collaborative Lifecycle Management 5.0至6.0.6版本；Rational Quality Manager 5.0至5.0.2版本和6.0和6.0.6版本；Rational Team Concert 5.0至5.0.2版本和6.0至6.0.6版本Rational DOORS Next Generation 5.0至5.0.2版本和6.0至6.0.6版本；Rational Engineering Lifecycle Manager 5.0至5.0.2版本和6.0至6.0.6版本；Rational Rhapsody Design Manager 5.0至5.0.2版本和6.0至6.0.6版本；Rational Software Architect Design Manager 5.0至5.0.2版本和6.0至6.0.1版本。
solution:Upgrade ibm rational_collaborative_lifecycle_management to a higher version than 6.0.6,and avoid the version [5.0.0,6.0.6]; Upgrade ibm rational_doors_next_generation to a higher version than 5.0.2,6.0.6,and avoid the version [5.0.0,5.0.2],[6.0.0,6.0.6]; Upgrade ibm rational_engineering_lifecycle_manager to a higher version than 5.0.2,6.0.6,and avoid the version [5.0.0,5.0.2],[6.0.0,6.0.6]; Upgrade ibm rational_quality_manager to a higher version than 5.0.2,6.0.6,and avoid the version [5.0.0,5.0.2],[6.0.0,6.0.6]; Upgrade ibm rational_rhapsody_design_manager to a higher version than 5.0.2,6.0.6,and avoid the version [5.0.0,5.0.2],[6.0.0,6.0.6]; Upgrade ibm rational_software_architect_design_manager to a higher version than 5.0.2,6.0.1,and avoid the version [5.0.0,5.0.2],[6.0.0,6.0.1]; Upgrade ibm rational_team_concert to a higher version than 5.0.2,6.0.6,and avoid the version [5.0.0,5.0.2],[6.0.0,6.0.6]