First published: Tue Jan 26 2021(Updated: )
IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Ibm Collaborative Lifecycle Management | =6.0.2 | |
Ibm Collaborative Lifecycle Management | =6.0.6 | |
Ibm Collaborative Lifecycle Management | =6.0.6.1 | |
IBM ENI | =7.0 | |
IBM Engineering Lifecycle Management | =7.0 | |
IBM Engineering Requirements Management DOORS Next | =6.0.2 | |
IBM Engineering Requirements Management DOORS Next | =6.0.6 | |
IBM Engineering Requirements Management DOORS Next | =6.0.6.1 | |
IBM Engineering Requirements Management DOORS Next | =7.0 | |
IBM Engineering Test Management | =7.0.0 | |
IBM Engineering Workflow Management | =6.0.2 | |
IBM Engineering Workflow Management | =6.0.6 | |
IBM Engineering Workflow Management | =6.0.6.1 | |
IBM Engineering Workflow Management | =7.0 | |
IBM Engineering Workflow Management | =7.0.2 | |
IBM Global Configuration Management | ||
IBM Rational Engineering Lifecycle Manager | =6.0.2 | |
IBM Rational Engineering Lifecycle Manager | =6.0.6 | |
IBM Rational Engineering Lifecycle Manager | =6.0.6.1 | |
IBM Rational Quality Manager | =6.0.2 | |
IBM Rational Quality Manager | =6.0.6 | |
IBM Rational Quality Manager | =6.0.6.1 | |
Ibm Rhapsody Design Manager | =6.0.2 | |
Ibm Rhapsody Design Manager | =6.0.6 | |
Ibm Rhapsody Design Manager | =6.0.6.1 | |
Ibm Rhapsody Design Manager | =7.0 | |
IBM Rhapsody Model Manager | =6.0.2 | |
IBM Rhapsody Model Manager | =6.0.6 | |
IBM Rhapsody Model Manager | =6.0.6.1 | |
IBM Rhapsody Model Manager | =7.0 | |
<=7.0.2 | ||
<=6.0.2 | ||
<=6.0.6.1 | ||
<=7.0 | ||
<=6.0.6 | ||
<=6.0.2 | ||
<=7.0 | ||
<=6.0.6.1 | ||
<=6.0.6 | ||
<=6.0.6 | ||
<=6.0.6.1 | ||
<=6.0.2 | ||
<=7.0 | ||
<=6.0.6.1 | ||
<=6.0.6 | ||
<=7.0 | ||
<=6.0.2 | ||
<=6.0.6.1 | ||
<=6.0.6 | ||
<=7.0 | ||
<=6.0.2 | ||
<=6.0.6.1 | ||
<=6.0.6 | ||
<=7.0.0 | ||
<=6.0.2 | ||
<=6.0.6.1 | ||
<=6.0.6 | ||
<=7.0 | ||
<=6.0.2 | ||
<=All |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID of this vulnerability is CVE-2020-4524.
The severity of CVE-2020-4524 is medium with a severity value of 5.4.
IBM Jazz Foundation products like EWM, RTC, RDNG, Rhapsody DM, RDM, RMM, CLM, ELM, RQM, ENI, Global Configuration Management, RELM, and Engineering Workflow Management, are affected by CVE-2020-4524.
CVE-2020-4524 allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.
Yes, IBM has provided a fix for CVE-2020-4524. Please refer to the IBM support page for more information.