CVE-2018-1606

IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Quality Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Rhapsody Design Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Software Architect Design Manager 5.0 through 5.02 and 6.0 through 6.0.1, IBM Rational Team Concert 5.0 through 5.02 and 6.0 through 6.0.6) could allow an authenticated user to obtain sensitive information from an error message that could be used in further attacks against the system. IBM X-Force ID: 143796.

• CWE-200

• http://www.ibm.com/support/docview.wss?uid=ibm10738301Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/143796VDB Entry, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=ibm10738301Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/143796VDB Entry, Vendor Advisory

Published

Nov 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-16051An issue was discovered in GitLab Community and Enterprise E…
• CVE-2018-16055An authenticated command injection vulnerability exists in s…
• CVE-2018-16056In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.…
• CVE-2018-16057In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.…7.5
• CVE-2018-16058In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.…
• CVE-2018-16059Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allo…
• CVE-2018-16060Mitsubishi Electric Europe B.V. SmartRTU devices allow remot…7.5
• CVE-2018-16061Mitsubishi Electric Europe B.V. SmartRTU devices allow XSS v…6.1
• CVE-2018-16062dwarf_getaranges in dwarf_getaranges.c in libdw in elfutils …5.5
• CVE-2018-16064Insufficient data validation in Extensions API in Google Chr…
• CVE-2018-16065A Javascript reentrancy issues that caused a use-after-free …
• CVE-2018-16066A use after free in Blink in Google Chrome prior to 69.0.349…