CVE-2020-4522: XSS
IBM Engineering Requirements Management DOORS Next is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Other sources
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182397.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-4522?
The severity of CVE-2020-4522 is medium with a severity value of 5.4.
What is the impact of CVE-2020-4522?
CVE-2020-4522 allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.
Which products are affected by CVE-2020-4522?
CVE-2020-4522 affects IBM Engineering Requirements Management DOORS Next (DOORS Next 7.0.1), IBM RDNG (up to 6.0.2 and 6.0.6.1), IBM RTC (up to 6.0.2 and 6.0.6.1), IBM EWM (7.0), IBM RELM (up to 6.0.2 and 6.0.6.1), IBM ENI (7.0), IBM RQM (up to 6.0.2 and 6.0.6.1), IBM ETM (7.0.0), IBM CLM (up to 6.0.2 and 6.0.6.1), IBM ELM (7.0), IBM Engineering Workflow Management (up to 7.0.1), IBM Rational Collaborative Lifecycle Management (up to 6.0.2 and 6.0.6.1), IBM Rational DOORS Next Generation (up to 6.0.2 and 6.0.6.1), IBM Rational Engineering Lifecycle Manager (up to 6.0.2, 6.0.6.1, and 7.0), IBM Rational Quality Manager (up to 6.0.2 and 6.0.6.1), and IBM Rational Team Concert (up to 6.0.2 and 6.0.6.1).
How can I mitigate the vulnerability in CVE-2020-4522?
To mitigate the vulnerability in CVE-2020-4522, IBM recommends upgrading to a fixed version of the affected software.
Where can I find more information about CVE-2020-4522?
You can find more information about CVE-2020-4522 on the IBM X-Force Exchange website and IBM support pages.