CVE-2017-1251: An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters be...

Security readout for executives and security teams

This IBM Rational Collaborative Lifecycle Management issue can expose some administrative deployment parameters to an attacker. The public bundle does not provide CVSS, prerequisites, or confirmed exploit activity, so business risk depends on whether affected CLM versions are deployed and reachable. Exposure is likely limited to organizations running the listed IBM Rational CLM versions, especially systems reachable by untrusted users or networks. Confirm actual exposure through asset inventory and vendor advisory review. Treat as an exposure review item rather than an emergency based on available evidence. Prioritize if affected CLM systems are externally reachable or hold sensitive deployment details. Mitigation focus: Inventory IBM Rational CLM deployments and versions.; Review IBM advisory swg22010682 for official fixes or mitigations.; Limit access to CLM administrative and deployment interfaces..

Prepared

Jun 12, 2026, 19:33 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.