CVE-2017-1690: XSS
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134065.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1690?
The severity of CVE-2017-1690 is considered high due to its potential to allow cross-site scripting attacks.
How do I fix CVE-2017-1690?
To fix CVE-2017-1690, you should update IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management to the latest versions that have patched this vulnerability.
What systems are affected by CVE-2017-1690?
CVE-2017-1690 affects IBM Rational Quality Manager versions 5.0 through 5.0.2 and 6.0 through 6.0.5, as well as IBM Rational Collaborative Lifecycle Management versions 5.0 through 5.0.2 and 6.0 through 6.0.5.
What type of vulnerability is CVE-2017-1690?
CVE-2017-1690 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary JavaScript code.
What can attackers do with CVE-2017-1690?
Attackers exploiting CVE-2017-1690 can manipulate the Web UI and potentially compromise user data or conduct phishing attacks.