CVE-2016-6055: XSS
IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1995515.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6055?
CVE-2016-6055 is rated as a medium severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2016-6055?
To mitigate CVE-2016-6055, it is recommended to update IBM Rational DOORS Next Generation or IBM Rational Requirements Composer to the latest version that addresses this vulnerability.
What types of attacks can CVE-2016-6055 enable?
CVE-2016-6055 allows attackers to execute arbitrary JavaScript code in the web interface, potentially leading to credential disclosure.
Which IBM products are affected by CVE-2016-6055?
CVE-2016-6055 affects IBM Rational DOORS Next Generation versions 4.0, 5.0, and 6.0, along with IBM Rational Requirements Composer versions 4.0.1 to 4.0.7.
Is user input affected by CVE-2016-6055?
Yes, CVE-2016-6055 allows user input to be manipulated, which can be exploited to execute malicious scripts in a trusted session.