CVE-2017-1275: XSS
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124750.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1275?
CVE-2017-1275 is classified as a medium severity cross-site scripting vulnerability.
How do I fix CVE-2017-1275?
To fix CVE-2017-1275, update IBM Rational Quality Manager or IBM Rational Collaborative Lifecycle Management to the latest version provided by IBM.
What versions are affected by CVE-2017-1275?
CVE-2017-1275 affects IBM Rational Quality Manager versions 5.0.0 to 5.0.2 and 6.0.0 to 6.0.5, as well as IBM Rational Collaborative Lifecycle Management versions 5.0.0 to 5.0.2 and 6.0.0 to 6.0.5.
What types of attacks can CVE-2017-1275 enable?
CVE-2017-1275 can enable attackers to execute arbitrary JavaScript code in the web interface, potentially compromising user data.
Is user authentication affected by CVE-2017-1275?
No, CVE-2017-1275 specifically impacts the web UI and does not directly affect user authentication mechanisms.