CVE-2017-1280: XSS
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124758.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1280?
CVE-2017-1280 has been classified as a moderate severity vulnerability due to its cross-site scripting capabilities.
How do I fix CVE-2017-1280?
To mitigate CVE-2017-1280, ensure you update IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management to the latest patched versions.
Which versions are affected by CVE-2017-1280?
CVE-2017-1280 affects IBM Rational Quality Manager versions 5.0.0 through 5.0.2 and 6.0.0 through 6.0.5, as well as IBM Rational Collaborative Lifecycle Management versions 5.0.0 through 5.0.2 and 6.0.0 through 6.0.5.
What does CVE-2017-1280 allow an attacker to do?
CVE-2017-1280 allows an attacker to embed arbitrary JavaScript code into the Web UI, which can alter functionality and lead to further exploitation.
Is CVE-2017-1280 a local or remote vulnerability?
CVE-2017-1280 is considered a remote vulnerability because it can be exploited through a web interface by an attacker without direct access to the system.