CVE-2017-1247: XSS
IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124627.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1247?
CVE-2017-1247 has a medium severity rating due to its potential for cross-site scripting attacks that can lead to credential disclosure.
How do I fix CVE-2017-1247?
To remediate CVE-2017-1247, update IBM DOORS Next Generation or Rational Requirements Composer to the latest patched version.
What versions are affected by CVE-2017-1247?
CVE-2017-1247 affects IBM DOORS Next Generation versions 4.0, 5.0, 5.0.1, 5.0.2, 6.0.0, 6.0.1, 6.0.2, and 6.0.3, as well as Rational Requirements Composer versions 4.0.1 through 4.0.7.
What are the potential impacts of CVE-2017-1247?
The potential impacts of CVE-2017-1247 include unauthorized modification of web applications and compromised user credentials within a trusted session.
Is user interaction required to exploit CVE-2017-1247?
Yes, exploitation of CVE-2017-1247 typically requires victim user interaction to execute the embedded JavaScript.