CVE-2017-1682: XSS

Published Feb 14, 2018

Updated

IBM Connections 4.0, 4.5, 5.0, 5.5, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134004.

Affected Software

5 affected components

IBM Connections=4.0

IBM Connections=4.5

IBM Connections=5.0

IBM Connections=5.5

IBM Connections=6.0

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg22012900

Event History

Feb 14, 2018

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2017-1682?

CVE-2017-1682 is a vulnerability in IBM Connections 4.0, 4.5, 5.0, 5.5, and 6.0 that allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.

How does CVE-2017-1682 affect IBM Connections?

CVE-2017-1682 affects IBM Connections 4.0, 4.5, 5.0, 5.5, and 6.0 and can be exploited to perform cross-site scripting attacks.

What is the severity of CVE-2017-1682?

The severity of CVE-2017-1682 is medium with a CVSS score of 5.4.

How can I fix CVE-2017-1682?

To fix CVE-2017-1682, it is recommended to apply the latest security patches provided by IBM.

Where can I find more information about CVE-2017-1682?

You can find more information about CVE-2017-1682 on the IBM support page and the IBM X-Force ID page.