Skip to content
OpenAdvisories
Medium · 4.3 CVE-2018-1492 EUVD-2018-12071GHSA-j334-wp82-9v7f

IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to the server's failure to…

Published Jul 10, 2018 · Updated Sep 17, 2024 · Assigned by ibm

Description

IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to the server's failure to properly log out from the previous session. IBM X-Force ID: 140977.

Affected products

VendorProductAffectedFixed
IBM Rational Engineering Lifecycle Manager 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5 —
IBM Rational Software Architect Design Manager 5.0, 5.0.2, 5.0.1, 6.0, 6.0.1 —
IBM Rational Team Concert 5.0, 5.0.2, 5.0.1, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5 —
IBM Rational Collaborative Lifecycle Management 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5 —
IBM Rational DOORS Next Generation 5.0.2, 5.0, 5.0.1, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5 —
IBM Rational Rhapsody Design Manager 5.0, 5.0.2, 5.0.1, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5 —
IBM Rational Quality Manager 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5 —

References