CVE-2018-1422: XSS
IBM Jazz Foundation products (IBM Rational DOORS Next Generation 5.0 through 5.0.2 and 6.0 through 6.0.5) are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139025.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1422?
CVE-2018-1422 is classified as a medium-severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2018-1422?
To remediate CVE-2018-1422, update IBM Rational DOORS Next Generation to the latest version beyond 6.0.5.
What types of products are affected by CVE-2018-1422?
CVE-2018-1422 affects IBM Rational DOORS Next Generation versions 5.0 to 5.0.2 and 6.0 to 6.0.5.
What are the risks associated with CVE-2018-1422?
The risks associated with CVE-2018-1422 include the possibility of unauthorized script execution leading to data theft or session hijacking.
How can I determine if my system is vulnerable to CVE-2018-1422?
You can determine your system's vulnerability to CVE-2018-1422 by checking if you are using any affected versions of IBM Rational DOORS Next Generation.