Security Bulletin: Vulnerability affects IBM® Rational Team Concert™ GIT Integration (CVE-2016-2865 )

Summary

A vulnerability was discovered in IBM® Rational Team Concert™ GIT Integration that could disclose some sensitive information.

Vulnerability Details

CVEID: CVE-2016-2865**
DESCRIPTION:** IBM Rational Team Concert (RTC) could allow an authenitcated user to create a corrupted request to the server that could disclose some sensitive information.
CVSS Base Score: 4.3
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/112761 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Rational Collaborative Lifecycle Management 5.0.0 - 6.0.1
Rational Team Concert 5.0 - 5.0.2
Rational Team Concert 6.0 - 6.0.1

Remediation/Fixes

For the 6.0.x releases, upgrade to version 6.0.1 ifix5 or later

• Rational Collaborative Lifecycle Management 6.0.1 iFix5
• Rational Team Concert 6.0.1 iFix5
• For the 5.x releases, upgrade to version 5.0.2 iFix14 or later
• Rational Collaborative Lifecycle Management 5.0.2 iFix14
• Rational Team Concert 5.0.2 iFix14