First published: Mon Aug 06 2018(Updated: )
IBM Jazz Foundation products (IBM Rational DOORS Next Generation 5.0 through 5.0.2 and 6.0 through 6.0.5) are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139025.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Engineering Requirements Management DOORS Next Generation | >=5.0<=5.0.2 | |
IBM Engineering Requirements Management DOORS Next Generation | >=6.0.0<=6.0.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-1422 is classified as a medium-severity vulnerability due to its potential for cross-site scripting attacks.
To remediate CVE-2018-1422, update IBM Rational DOORS Next Generation to the latest version beyond 6.0.5.
CVE-2018-1422 affects IBM Rational DOORS Next Generation versions 5.0 to 5.0.2 and 6.0 to 6.0.5.
The risks associated with CVE-2018-1422 include the possibility of unauthorized script execution leading to data theft or session hijacking.
You can determine your system's vulnerability to CVE-2018-1422 by checking if you are using any affected versions of IBM Rational DOORS Next Generation.