CVE-2017-1277: XSS
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124752.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1277?
CVE-2017-1277 is classified as a medium severity vulnerability due to its potential to allow cross-site scripting attacks.
How do I fix CVE-2017-1277?
To address CVE-2017-1277, update your IBM Rational Quality Manager or IBM Rational Collaborative Lifecycle Management software to the latest patched version.
Which versions are affected by CVE-2017-1277?
CVE-2017-1277 affects IBM Rational Quality Manager versions 5.0.0 to 5.0.2 and 6.0.0 to 6.0.5, as well as IBM Rational Collaborative Lifecycle Management versions 5.0.0 to 5.0.2 and 6.0.0 to 6.0.5.
What types of attacks can CVE-2017-1277 facilitate?
CVE-2017-1277 can facilitate cross-site scripting attacks, allowing attackers to execute arbitrary JavaScript in a user's browser.
Is authentication required to exploit CVE-2017-1277?
Authentication is not required to exploit CVE-2017-1277, making it accessible to unauthenticated users.