CVE-2018-1558: XSS

Q: What is CVE-2018-1558?

CVE-2018-1558 is a vulnerability in IBM Rational Collaborative Lifecycle Management that allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure.

Q: How severe is CVE-2018-1558?

CVE-2018-1558 has a severity score of 5.4, indicating a medium-level vulnerability.

Q: How can I fix CVE-2018-1558?

To fix CVE-2018-1558, users should update their IBM Rational Collaborative Lifecycle Management software to version 6.0.7 or later.

Q: Where can I find more information about CVE-2018-1558?

You can find more information about CVE-2018-1558 on the Debian security tracker, the IBM support website, and the IBM X-Force Exchange.

Published Oct 2, 2018

Updated

IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142956.

Affected Software

13 affected components

IBM Rational Collaborative Lifecycle Management>=5.0<=6.0.6

IBM Rational DOORS Next Generation>=5.0<=5.0.2

IBM Rational DOORS Next Generation>=6.0.0<=6.0.6

IBM Rational Engineering Lifecycle Manager>=5.0<=5.0.2

IBM Rational Engineering Lifecycle Manager>=6.0<=6.0.6

IBM Rational Quality Manager>=5.0<=5.0.2

IBM Rational Quality Manager>=6.0<=6.0.6

IBM Rational Rhapsody Design Manager>=5.0<=5.0.2

IBM Rational Rhapsody Design Manager>=6.0<=6.0.6

IBM Rational Software Architect Design Manager>=5.0<=5.0.2

IBM Rational Software Architect Design Manager>=6.0<=6.0.1

IBM Rational Team Concert>=5.0<=5.0.2

IBM Rational Team Concert>=6.0<=6.0.6

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=ibm10732477

Event History

Oct 2, 2018

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionSeverityWeakness

Oct 21, 2023

Data Sourced

02:53 AM

DescriptionAffected Software

Frequently Asked Questions

What is CVE-2018-1558?

CVE-2018-1558 is a vulnerability in IBM Rational Collaborative Lifecycle Management that allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure.

Which software versions are affected by CVE-2018-1558?

IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6 are affected by CVE-2018-1558.

How severe is CVE-2018-1558?