CVE-2017-1240: IBM Rational Collaborative Lifecycle Management

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

IBM Rhapsody DM products could reveal sensitive information in HTTP 500 Internal Server Error responses. IBM X-Force ID: 124359.

Affected products

IBM Rational Collaborative Lifecycle Management: version 4.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; …
IBM Rational Doors Next Generation: version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; version 4.0.6 only; …
IBM Rational Engineering Lifecycle Manager: version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; version 4.0.6 only; version 4.0.7 only; version 5.0 only; …
IBM Rational Quality Manager: version 4.0 only; version 4.0.0.1 only; version 4.0.0.2 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; …
IBM Rational Rhapsody Design Manager: version 4.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; …
IBM Rational Software Architect Design Manager: version 4.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; …
IBM Rational Team Concert: version 4.0 only; version 4.0.0.1 only; version 4.0.0.2 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; …

Published 2017-11-27. Last modified 2026-06-17.