CVE-2018-1762: XSS
IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148616.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1762?
The severity of CVE-2018-1762 is medium with a CVSS score of 5.4.
How does CVE-2018-1762 affect IBM Rational Collaborative Lifecycle Management?
CVE-2018-1762 affects IBM Rational Collaborative Lifecycle Management versions 5.0 through 5.0.2 and 6.0 through 6.0.6 by making them vulnerable to cross-site scripting.
How can an attacker exploit CVE-2018-1762?
An attacker can exploit CVE-2018-1762 by embedding arbitrary JavaScript code in the Web UI of IBM Rational Collaborative Lifecycle Management, potentially leading to credentials disclosure.
How can I fix CVE-2018-1762?
To fix CVE-2018-1762, apply the necessary security patches provided by IBM.
Where can I find more information about CVE-2018-1762?
You can find more information about CVE-2018-1762 on the following references: BID 106053, IBM X-Force ID 148616, and IBM Support Document.