SDLC

IBM RTC

Rational Team Concert is a team collaboration tool that is built on a scalable extensible platform. Rational Team Concert uses the Change and Configuration Management (CCM) application to provide features that integrate development project tasks including iteration planning process definition change management defect tracking source control build automation and reporting.

Official Site:

https://www.ibm.com/support/knowledgecenter/SSYMRC_6.0.4/com.ibm.team.concert.doc/topics/c_product-overview.html

Severity Summary:

High: 9 Medium: 129 Low: 11

Reference

Title

Severity

CVE-2016-0273

IBM RTC Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2016-0331

IBM RTC Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2016-2865

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Medium

CVE-2017-1602

IBM RTC Files or Directories Accessible to External Parties Vulnerability

Medium

CVE-2017-1191

IBM RTC Vulnerability

Medium

CVE-2017-1570

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Medium

CVE-2017-1365

IBM RTC Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2016-0219

IBM RTC Improper Restriction of XML External Entity Reference Vulnerability

Medium

CVE-2017-1653

IBM RTC Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2017-1237

IBM RTC Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2017-1488

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Medium

CVE-2017-1629

IBM RTC Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2017-1655

IBM RTC Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2017-1762

IBM RTC Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Medium

CVE-2017-1700

IBM RTC Incorrect Authorization Vulnerability

Medium

CVE-2017-1725

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Medium

CVE-2017-1524

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Medium

CVE-2017-1734

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Medium

CVE-2015-0122

IBM RTC Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Low

CVE-2015-0130

IBM RTC Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Low

CVE-2014-3050

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Low

CVE-2013-5404

IBM RTC Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Low

CVE-2011-1029

IBM RTC Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Low

CVE-2015-4946

IBM RTC Permissions Privileges and Access Controls Vulnerability

Low

CVE-2016-0372

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Low

CVE-2015-4962

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Low

CVE-2016-2947

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Low

CVE-2015-7449

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Low

CVE-2015-0123

IBM RTC Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Low