CVE-2018-1494: XSS

Published Jul 6, 2018

Updated

IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 141097.

Affected Software

9 affected components

IBM Rational DOORS Next Generation=5.0

IBM Rational DOORS Next Generation=5.0.1

IBM Rational DOORS Next Generation=5.0.2

IBM Rational DOORS Next Generation=6.0.0

IBM Rational DOORS Next Generation=6.0.1

IBM Rational DOORS Next Generation=6.0.2

IBM Rational DOORS Next Generation=6.0.3

IBM Rational DOORS Next Generation=6.0.4

IBM Rational DOORS Next Generation=6.0.5

Event History

Jul 6, 2018

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2018-1494?

CVE-2018-1494 is classified as a moderate severity vulnerability due to cross-site scripting risks.

How do I fix CVE-2018-1494?

To fix CVE-2018-1494, upgrade IBM DOORS Next Generation to version 6.0.6 or later.

What versions are affected by CVE-2018-1494?

CVE-2018-1494 affects IBM DOORS Next Generation versions 5.0 through 5.0.2 and 6.0 through 6.0.5.

What kind of vulnerability is CVE-2018-1494?

CVE-2018-1494 is a cross-site scripting (XSS) vulnerability that allows embedding of arbitrary JavaScript code.

What are the potential consequences of CVE-2018-1494?

The potential consequences of CVE-2018-1494 include altered functionality of the web application and potential disclosure of user credentials.