CVE-2017-1629: XSS

Q: What is the vulnerability ID?

The vulnerability ID is CVE-2017-1629.

Q: What is the severity of CVE-2017-1629?

The severity of CVE-2017-1629 is medium with a severity value of 5.4.

Q: What is the impact of CVE-2017-1629?

CVE-2017-1629 allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure.

Q: Where can I find more information about CVE-2017-1629?

You can find more information about CVE-2017-1629 on the IBM support website, SecurityFocus, and IBM X-Force Exchange.

Published Mar 23, 2018

Updated

IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133127.

Affected Software

19 affected components

IBM Rational Collaborative Lifecycle Management>=4.0<=6.0.5

IBM Rational Quality Manager>=4.0<=4.0.7

IBM Rational Quality Manager>=5.0<=5.0.2

IBM Rational Quality Manager>=6.0<=6.0.5

IBM Rational Team Concert>=4.0<=4.0.7

IBM Rational Team Concert>=5.0<=5.0.2

IBM Rational Team Concert>=6.0<=6.0.5

IBM Rational DOORS Next Generation>=4.0.1<=4.0.7

IBM Rational DOORS Next Generation>=5.0<=5.0.2

IBM Rational DOORS Next Generation>=6.0.0<=6.0.5

IBM Rational Engineering Lifecycle Manager>=4.0.3<=4.0.7

IBM Rational Engineering Lifecycle Manager>=5.0<=5.0.2

IBM Rational Engineering Lifecycle Manager>=6.0<=6.0.5

IBM Rational Rhapsody Design Manager>=4.0<=4.0.7

IBM Rational Rhapsody Design Manager>=5.0<=5.0.2

IBM Rational Rhapsody Design Manager>=6.0<=6.0.5

IBM Rational Software Architect Design Manager>=4.0<=4.0.7

IBM Rational Software Architect Design Manager>=5.0<=5.0.2

IBM Rational Software Architect Design Manager>6.0<=6.0.1

Event History

Mar 20, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2017-1629.

What is the severity of CVE-2017-1629?

The severity of CVE-2017-1629 is medium with a severity value of 5.4.

What software is affected by CVE-2017-1629?

IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) as well as other IBM Rational software versions are affected.

What is the impact of CVE-2017-1629?

CVE-2017-1629 allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure.

Where can I find more information about CVE-2017-1629?