CVE-2017-1249: XSS
IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1249?
The severity of CVE-2017-1249 is considered to be medium due to the potential for cross-site scripting attacks that can lead to credentials disclosure.
How do I fix CVE-2017-1249?
To fix CVE-2017-1249, upgrade to IBM Rhapsody Design Manager version 6.0.4 or later, where this vulnerability has been addressed.
What type of vulnerability is CVE-2017-1249?
CVE-2017-1249 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary JavaScript code.
Which versions of IBM Rhapsody are affected by CVE-2017-1249?
CVE-2017-1249 affects IBM Rhapsody Design Manager versions 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, and 6.0.3.
What can attackers do with CVE-2017-1249?
Attackers exploiting CVE-2017-1249 can potentially embed malicious JavaScript, leading to unauthorized actions or information leakage in trusted sessions.