CVE-2017-1306: XSS
Published Jul 3, 2018
·Updated
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125460.
Affected Software
18 affected components
IBM Rational Collaborative Lifecycle Management=5.0.0
IBM Rational Collaborative Lifecycle Management=5.0.1
IBM Rational Collaborative Lifecycle Management=5.0.2
IBM Rational Collaborative Lifecycle Management=6.0.0
IBM Rational Collaborative Lifecycle Management=6.0.1
IBM Rational Collaborative Lifecycle Management=6.0.2
IBM Rational Collaborative Lifecycle Management=6.0.3
IBM Rational Collaborative Lifecycle Management=6.0.4
IBM Rational Collaborative Lifecycle Management=6.0.5
IBM Rational Quality Manager=5.0.0
IBM Rational Quality Manager=5.0.1
IBM Rational Quality Manager=5.0.2
IBM Rational Quality Manager=6.0.0
IBM Rational Quality Manager=6.0.1
IBM Rational Quality Manager=6.0.2
IBM Rational Quality Manager=6.0.3
IBM Rational Quality Manager=6.0.4
IBM Rational Quality Manager=6.0.5
Event History
Jul 3, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who is impacted by CVE-2017-1306?
Users of IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management who are using the affected versions are at risk due to CVE-2017-1306.