CVE-2016-2865

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-07-15 · updated 2026-06-17
Weakness: CWE-200

Description

The GIT Integration component in IBM Rational Team Concert (RTC) 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 and Rational Collaborative Lifecycle Management 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 allows remote authenticated users to obtain sensitive information via a malformed request.

Affected products

IBM Rational Collaborative Lifecycle Management: 5.0.0, 5.0.1, 5.0.2, 6.0.0, 6.0.1
IBM Rational Team Concert: 5.0.0, 5.0.1, 5.0.2, 6.0.0, 6.0.1

References

http://www-01.ibm.com/support/docview.wss?uid=swg21985865
http://www.securityfocus.com/bid/91680
http://www-01.ibm.com/support/docview.wss?uid=swg21985865
http://www.securityfocus.com/bid/91680

Get alerted when CVE-2016-2865 or the next vulnerability affects your stack