First published: Wed Mar 18 2015(Updated: )
Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix4, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0128.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Rational Quality Manager | =2.0 | |
IBM Rational Quality Manager | =2.0.0.1 | |
IBM Rational Quality Manager | =2.0.0.2 | |
IBM Rational Quality Manager | =2.0.1 | |
IBM Rational Quality Manager | =2.0.1.1 | |
IBM Rational Quality Manager | =3.0 | |
IBM Rational Quality Manager | =3.0.1 | |
IBM Rational Quality Manager | =3.0.1.1 | |
IBM Rational Quality Manager | =3.0.1.2 | |
IBM Rational Quality Manager | =3.0.1.3 | |
IBM Rational Quality Manager | =3.0.1.4 | |
IBM Rational Quality Manager | =3.0.1.5 | |
IBM Rational Quality Manager | =3.0.1.6 | |
IBM Rational Quality Manager | =4.0 | |
IBM Rational Quality Manager | =4.0.0.1 | |
IBM Rational Quality Manager | =4.0.0.2 | |
IBM Rational Quality Manager | =4.0.1 | |
IBM Rational Quality Manager | =4.0.2 | |
IBM Rational Quality Manager | =4.0.3 | |
IBM Rational Quality Manager | =4.0.4 | |
IBM Rational Quality Manager | =4.0.5 | |
IBM Rational Quality Manager | =4.0.6 | |
IBM Rational Quality Manager | =4.0.7 | |
IBM Rational Quality Manager | =5.0.0 | |
IBM Rational Quality Manager | =5.0.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-0124 is classified as a medium severity cross-site scripting (XSS) vulnerability.
To fix CVE-2015-0124, upgrade IBM Rational Quality Manager to version 3.0.1.6 iFix4, 4.0.7 iFix3, or 5.0.2 or later.
CVE-2015-0124 affects users of IBM Rational Quality Manager versions 2.x, 3.x, 4.x, and 5.x prior to specific iFixes.
CVE-2015-0124 allows remote authenticated users to execute arbitrary web scripts or HTML via crafted URLs.
Yes, CVE-2015-0124 is a known cross-site scripting issue reported in multiple versions of IBM Rational Quality Manager.