CVE-2017-1099

CVE-2017-1099 describes an information disclosure vulnerability in IBM Jazz Foundation, affecting several IBM Rational products including Collaborative Lifecycle Management, DOORS Next Generation, and Team Concert. Authenticated users can exploit stack trace error conditions to expose potentially sensitive information. With a CVSS score of 4.3 (Medium), this vulnerability has a low attack complexity and requires user authentication, leading to a low impact on confidentiality. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it has garnered some community discussion and media coverage.