CVE-2017-1168: XSS
IBM Rational Engineering Lifecycle Manager 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123187.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1168?
The severity of CVE-2017-1168 is classified as medium due to the potential for cross-site scripting attacks.
How do I fix CVE-2017-1168?
To fix CVE-2017-1168, users should apply the latest patches or updates provided by IBM for the affected versions of Rational Engineering Lifecycle Manager.
What versions of IBM Rational Engineering Lifecycle Manager are affected by CVE-2017-1168?
CVE-2017-1168 affects IBM Rational Engineering Lifecycle Manager versions 4.0, 5.0, and 6.0 specifically 4.0.3 to 6.0.3.
What type of vulnerability is CVE-2017-1168?
CVE-2017-1168 is a cross-site scripting (XSS) vulnerability.
What impact does CVE-2017-1168 have on users?
CVE-2017-1168 can lead to unauthorized execution of JavaScript in a user's session, potentially resulting in sensitive data disclosure.