IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to send a specially crafted HTTP GET request to read attachments on the server that they should not have access to. IBM X-Force ID: 179539.
| Software | From | Fixed in |
|---|---|---|
| ibm / rational_rhapsody_design_manager | 6.0.2 | 6.0.2.x |
| ibm / engineering_test_management | 7.0.0 | 7.0.0.x |
| ibm / rational_rhapsody_design_manager | 7.0.0 | 7.0.0.x |