CVE-2018-1758: XSS

Q: What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2018-1758.

Q: What is the severity of CVE-2018-1758?

The severity of CVE-2018-1758 is medium (5.4).

Q: Which software versions are affected by CVE-2018-1758?

IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.6.1

Q: How does CVE-2018-1758 impact the affected software?

CVE-2018-1758 allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.

Q: Is there a fix available for CVE-2018-1758?

Yes, IBM has released fixes for the affected software versions. It is recommended to update to the latest version.

Published Jun 27, 2019

Updated

IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148605.

Affected Software

8 affected components

IBM Rational Collaborative Lifecycle Management>=6.0<=6.0.6.1

IBM Rational DOORS Next Generation>=6.0<=6.0.6.1

IBM Rational Engineering Lifecycle Manager>=6.0<=6.0.6.1

IBM Rational Quality Manager>=6.0<=6.0.6.1

IBM Rational Rhapsody Design Manager>=6.0<=6.0.6.1

IBM Rational Software Architect Design Manager>=6.0<=6.0.1

IBM Rational Team Concert>=6.0<=6.0.6.1

IBM Rhapsody Model Manager>=6.0.5<=6.0.6.1

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=ibm10956525

Event History

Jun 27, 2019

CVE Published

via MITRE·01:45 PM

Data Sourced

via MITRE·01:45 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2018-1758.

What is the severity of CVE-2018-1758?

The severity of CVE-2018-1758 is medium (5.4).

Which software versions are affected by CVE-2018-1758?