CVE-2017-1128: XSS
IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1128?
CVE-2017-1128 has a medium severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2017-1128?
To fix CVE-2017-1128, apply the latest security updates provided by IBM for affected Rational DOORS Next Generation and Rational Requirements Composer versions.
What are the affected versions listed in CVE-2017-1128?
The affected versions in CVE-2017-1128 include IBM Rational DOORS Next Generation versions 4.0, 5.0, and 6.0, as well as IBM Rational Requirements Composer versions 4.0 and its sub-versions.
What type of attack does CVE-2017-1128 enable?
CVE-2017-1128 enables cross-site scripting attacks allowing attackers to execute arbitrary JavaScript code in users' web sessions.
Who is impacted by the CVE-2017-1128 vulnerability?
Users of IBM Rational DOORS Next Generation and Rational Requirements Composer are impacted by the CVE-2017-1128 vulnerability.