CVE-2017-1250: XSS
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force 124630.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1250?
CVE-2017-1250 is classified as a medium severity cross-site scripting vulnerability.
How do I fix CVE-2017-1250?
To fix CVE-2017-1250, update IBM Rational Quality Manager or IBM Rational Collaborative Lifecycle Management to the latest patched version.
What systems are affected by CVE-2017-1250?
CVE-2017-1250 affects IBM Rational Quality Manager versions 5.0.0 to 5.0.2 and 6.0.0 to 6.0.5, as well as IBM Rational Collaborative Lifecycle Management versions 5.0.0 to 5.0.2 and 6.0.0 to 6.0.5.
What kind of attack can be executed using CVE-2017-1250?
CVE-2017-1250 allows attackers to execute arbitrary JavaScript code in the web user interface of the affected products.
Is there a workaround for CVE-2017-1250?
There is no specified workaround for CVE-2017-1250, so upgrading to the updated version is recommended.