First published: Tue Jan 26 2021(Updated: )
IBM Engineering Requirements Management DOORS Next is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
Ibm Collaborative Lifecycle Management | =6.0.2 | |
Ibm Collaborative Lifecycle Management | =6.0.6 | |
Ibm Collaborative Lifecycle Management | =6.0.6.1 | |
IBM ENI | =7.0 | |
IBM Engineering Lifecycle Management | =7.0 | |
IBM Engineering Requirements Management DOORS Next | =6.0.2 | |
IBM Engineering Requirements Management DOORS Next | =6.0.6 | |
IBM Engineering Requirements Management DOORS Next | =6.0.6.1 | |
IBM Engineering Requirements Management DOORS Next | =7.0 | |
IBM Engineering Test Management | =7.0.0 | |
IBM Engineering Workflow Management | =6.0.2 | |
IBM Engineering Workflow Management | =6.0.6 | |
IBM Engineering Workflow Management | =6.0.6.1 | |
IBM Engineering Workflow Management | =7.0 | |
IBM Engineering Workflow Management | =7.0.2 | |
IBM Global Configuration Management | ||
IBM Rational Engineering Lifecycle Manager | =6.0.2 | |
IBM Rational Engineering Lifecycle Manager | =6.0.6 | |
IBM Rational Engineering Lifecycle Manager | =6.0.6.1 | |
IBM Rational Quality Manager | =6.0.2 | |
IBM Rational Quality Manager | =6.0.6 | |
IBM Rational Quality Manager | =6.0.6.1 | |
Ibm Rhapsody Design Manager | =6.0.2 | |
Ibm Rhapsody Design Manager | =6.0.6 | |
Ibm Rhapsody Design Manager | =6.0.6.1 | |
Ibm Rhapsody Design Manager | =7.0 | |
IBM Rhapsody Model Manager | =6.0.2 | |
IBM Rhapsody Model Manager | =6.0.6 | |
IBM Rhapsody Model Manager | =6.0.6.1 | |
IBM Rhapsody Model Manager | =7.0 | |
<=7.0.2 | ||
<=6.0.2 | ||
<=6.0.6.1 | ||
<=7.0 | ||
<=6.0.6 | ||
<=6.0.2 | ||
<=7.0 | ||
<=6.0.6.1 | ||
<=6.0.6 | ||
<=6.0.6 | ||
<=6.0.6.1 | ||
<=6.0.2 | ||
<=7.0 | ||
<=6.0.6.1 | ||
<=6.0.6 | ||
<=7.0 | ||
<=6.0.2 | ||
<=6.0.6.1 | ||
<=6.0.6 | ||
<=7.0 | ||
<=6.0.2 | ||
<=6.0.6.1 | ||
<=6.0.6 | ||
<=7.0.0 | ||
<=6.0.2 | ||
<=6.0.6.1 | ||
<=6.0.6 | ||
<=7.0 | ||
<=6.0.2 | ||
<=All |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-4855 is a vulnerability in IBM Engineering Requirements Management DOORS Next that allows users to embed arbitrary JavaScript code in the Web UI.
CVE-2020-4855 allows for cross-site scripting, potentially leading to credentials disclosure within a trusted session.
IBM EWM, IBM RTC, IBM RDNG, IBM DOORS Next, IBM Rhapsody DM, IBM RDM, IBM RMM, IBM CLM, IBM ELM, IBM RQM, and IBM ENI are among the products affected by CVE-2020-4855.
CVE-2020-4855 has a severity rating of medium with a CVSS score of 5.4.
To fix CVE-2020-4855, it is recommended to apply the latest security patches provided by IBM.