CVE-2018-1828: XSS
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150431.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2018-1828.
What is the severity of CVE-2018-1828?
The severity of CVE-2018-1828 is medium with a severity value of 5.4.
Which software versions are affected by CVE-2018-1828?
IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.6.1, IBM Rational DOORS Next Generation versions 6.0 through 6.0.6.1, IBM Rational Engineering Lifecycle Manager versions 6.0 through 6.0.6.1, IBM Rational Quality Manager versions 6.0 through 6.0.6.1, IBM Rational Rhapsody Design Manager versions 6.0 through 6.0.6.1, IBM Rational Software Architect Design Manager versions 6.0 through 6.0.1, IBM Rational Team Concert versions 6.0 through 6.0.6.1, and IBM Rhapsody Model Manager versions 6.0 through 6.0.5 are affected by CVE-2018-1828.
What is the impact of CVE-2018-1828?
CVE-2018-1828 allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.
How can I fix CVE-2018-1828?
There is currently no known fix for CVE-2018-1828. It is recommended to monitor the official IBM support page for updates and apply any patches as soon as they become available.