CVE-2017-1338: XSS
IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126246.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1338?
CVE-2017-1338 is classified as a medium-severity cross-site scripting vulnerability.
How does CVE-2017-1338 affect IBM DOORS Next Generation and IBM Rational Requirements Composer?
CVE-2017-1338 allows attackers to embed arbitrary JavaScript code into the Web UI, potentially leading to unauthorized actions and credential disclosure.
How do I fix CVE-2017-1338?
To fix CVE-2017-1338, it is recommended to upgrade to the latest patched version of IBM DOORS Next Generation or IBM Rational Requirements Composer.
Which versions of software are affected by CVE-2017-1338?
CVE-2017-1338 affects IBM DOORS Next Generation versions 4.0, 5.0, and 6.0, as well as several versions of IBM Rational Requirements Composer.
What measures can I take to mitigate CVE-2017-1338?
To mitigate CVE-2017-1338, users should implement content security policies and input validation to prevent unauthorized scripts from being executed.