Description

IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to using a specially crafted URL. IBM X-Force ID: 132625.

Remediation

References

CVE-2017-1602

Related Vulnerabilities

WordPress Plugin 1-click Retweet/Share/Like Cross-Site Scripting (5.2)

ZenCart Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-4322)

Oracle Application Server Other Vulnerability (CVE-2002-0656)

WordPress Plugin OneClick Chat to Order Cross-Site Scripting (1.0.4.1)

Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3680)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-552 CVE-2017-1602