CVE-2018-1534: XSS

Published Oct 10, 2018

Updated

IBM Rational Publishing Engine 6.0.5 and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142432.

Affected Software

4 affected components

IBM Rational Publishing Engine=6.0.5

IBM Rational Publishing Engine=6.0.6

IBM Engineering Lifecycle Optimization - Publishing=6.0.5

IBM Engineering Lifecycle Optimization - Publishing=6.0.6

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=ibm10734697

Event History

Oct 12, 2018

CVE Published

11:29 AM

Data Sourced

via NVD·11:29 AM

RemedyDescriptionSeverityWeaknessAffected Software

CVE Published

via MITRE·12:00 PM

Data Sourced

via MITRE·12:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2018-1534.

What is the severity of CVE-2018-1534?

The severity of CVE-2018-1534 is medium with a severity value of 5.4.

What is the affected software?

The affected software is IBM Rational Publishing Engine version 6.0.5 and 6.0.6.

What is the potential impact of this vulnerability?

This vulnerability allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.

Are there any references available for this vulnerability?

Yes, you can find references for this vulnerability at the following links: [IBM Support](http://www.ibm.com/support/docview.wss?uid=ibm10734697) and [IBM X-Force](https://exchange.xforce.ibmcloud.com/vulnerabilities/142432).