CNVD-2018-09168

Vulnerability from cnvd - Published: 2018-05-09
VLAI
Title
多款IBM产品Jazz Team Server拒绝服务漏洞
Description
IBM Rational Collaborative Lifecycle Management(CLM)等都是美国IBM公司的产品。IBM Rational Collaborative Lifecycle Management是一套协作化生命周期管理解决方案。Rational DOORS Next Generation(RDNG)是一套需求管理解决方案。Jazz Team Server是其中的一个项目管理工具。 多款IBM产品中的Jazz Team Server存在安全漏洞,该漏洞源于程序未能正确的进行授权。攻击者可利用该漏洞造成拒绝服务。
Severity
Patch Name
多款IBM产品Jazz Team Server拒绝服务漏洞的补丁
Patch Description
IBM Rational Collaborative Lifecycle Management(CLM)等都是美国IBM公司的产品。IBM Rational Collaborative Lifecycle Management是一套协作化生命周期管理解决方案。Rational DOORS Next Generation(RDNG)是一套需求管理解决方案。Jazz Team Server是其中的一个项目管理工具。 多款IBM产品中的Jazz Team Server存在安全漏洞,该漏洞源于程序未能正确的进行授权。攻击者可利用该漏洞造成拒绝服务。目前,供应商发布了安全公告及相关补丁信息,修复了此漏洞。
Formal description

厂商已发布了漏洞修复程序,请及时关注更新: http://www-01.ibm.com/support/docview.wss?uid=swg22015635

Reference
http://www.ibm.com/support/docview.wss?uid=swg22015635
Impacted products
Name
['IBM Rational Quality Manager 5.0 - 5.0.2', 'IBM Rational Engineering Lifecycle Manager 5.0 - 5.0.2', 'IBM Rational Rhapsody Design Manager 5.0 - 5.0.2', 'IBM Rational Software Architect Design Manager 5.0 - 5.0.2', 'IBM Rational Team Concert >=5.0,<=5.0.2', 'IBM Rational DOORS Next Generation 6.0;6.0.3###5.0;5.0.2||4.0.1;4.0.7', 'IBM Rational Software Architect Design Manager >=6.0,<=6.0.1', 'IBM Rational Collaborative Lifecycle Management >=5.0,<=6.0.5', 'IBM Rational Quality Manager >=6.0,<=6.0.5', 'IBM Rational Team Concert >=6.0,<=6.0.5', 'IBM Rational DOORS Next Generation >=6.0,<=6.0.5', 'IBM Rational Rhapsody Design Manager 6.0,<=6.0.5', 'IBM Rational Engineering Lifecycle Manager >=6.0,<=6.0.5']
Show details on source website

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-1700"
    }
  },
  "description": "IBM Rational Collaborative Lifecycle Management\uff08CLM\uff09\u7b49\u90fd\u662f\u7f8e\u56fdIBM\u516c\u53f8\u7684\u4ea7\u54c1\u3002IBM Rational Collaborative Lifecycle Management\u662f\u4e00\u5957\u534f\u4f5c\u5316\u751f\u547d\u5468\u671f\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u3002Rational DOORS Next Generation\uff08RDNG\uff09\u662f\u4e00\u5957\u9700\u6c42\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u3002Jazz Team Server\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u9879\u76ee\u7ba1\u7406\u5de5\u5177\u3002\r\n\r\n\u591a\u6b3eIBM\u4ea7\u54c1\u4e2d\u7684Jazz Team Server\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u8fdb\u884c\u6388\u6743\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002",
  "discovererName": "IBM",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttp://www-01.ibm.com/support/docview.wss?uid=swg22015635",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-09168",
  "openTime": "2018-05-09",
  "patchDescription": "IBM Rational Collaborative Lifecycle Management\uff08CLM\uff09\u7b49\u90fd\u662f\u7f8e\u56fdIBM\u516c\u53f8\u7684\u4ea7\u54c1\u3002IBM Rational Collaborative Lifecycle Management\u662f\u4e00\u5957\u534f\u4f5c\u5316\u751f\u547d\u5468\u671f\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u3002Rational DOORS Next Generation\uff08RDNG\uff09\u662f\u4e00\u5957\u9700\u6c42\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u3002Jazz Team Server\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u9879\u76ee\u7ba1\u7406\u5de5\u5177\u3002\r\n\r\n\u591a\u6b3eIBM\u4ea7\u54c1\u4e2d\u7684Jazz Team Server\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u8fdb\u884c\u6388\u6743\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "\u591a\u6b3eIBM\u4ea7\u54c1Jazz Team Server\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "IBM Rational Quality Manager 5.0 - 5.0.2",
      "IBM Rational Engineering Lifecycle Manager 5.0 - 5.0.2",
      "IBM Rational Rhapsody Design Manager 5.0 - 5.0.2",
      "IBM Rational Software Architect Design Manager 5.0 - 5.0.2",
      "IBM Rational Team Concert \u003e=5.0\uff0c\u003c=5.0.2",
      "IBM Rational DOORS Next Generation 6.0;6.0.3###5.0;5.0.2||4.0.1;4.0.7",
      "IBM Rational Software Architect Design Manager \u003e=6.0\uff0c\u003c=6.0.1",
      "IBM Rational Collaborative Lifecycle Management \u003e=5.0\uff0c\u003c=6.0.5",
      "IBM Rational Quality Manager \u003e=6.0\uff0c\u003c=6.0.5",
      "IBM Rational Team Concert \u003e=6.0\uff0c\u003c=6.0.5",
      "IBM  Rational DOORS Next Generation \u003e=6.0\uff0c\u003c=6.0.5",
      "IBM Rational Rhapsody Design Manager 6.0\uff0c\u003c=6.0.5",
      "IBM Rational Engineering Lifecycle Manager \u003e=6.0\uff0c\u003c=6.0.5"
    ]
  },
  "referenceLink": "http://www.ibm.com/support/docview.wss?uid=swg22015635",
  "serverity": "\u4e2d",
  "submitTime": "2018-04-26",
  "title": "\u591a\u6b3eIBM\u4ea7\u54c1Jazz Team Server\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…