CVE-2017-1691: XSS
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134066.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1691?
CVE-2017-1691 is classified as a medium severity vulnerability due to the potential for cross-site scripting attacks.
How do I fix CVE-2017-1691?
To fix CVE-2017-1691, upgrade IBM Rational Quality Manager or IBM Rational Collaborative Lifecycle Management to the latest version that addresses this vulnerability.
What are the affected versions for CVE-2017-1691?
CVE-2017-1691 affects IBM Rational Quality Manager versions 5.0 through 5.0.2 and 6.0 through 6.0.5, as well as IBM Rational Collaborative Lifecycle Management versions 5.0 through 5.0.2 and 6.0 through 6.0.5.
Can CVE-2017-1691 lead to unauthorized access?
Yes, CVE-2017-1691 can allow attackers to execute arbitrary JavaScript, potentially leading to unauthorized access and data manipulation.
Who is at risk from CVE-2017-1691?
Organizations using vulnerable versions of IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management are at risk from CVE-2017-1691.