First published: Tue Jul 27 2021(Updated: )
IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Engineering Lifecycle Optimization - Engineering Insights | =7.0 | |
IBM Engineering Lifecycle Optimization - Engineering Insights | =7.0.1 | |
IBM Engineering Lifecycle Optimization - Engineering Insights | =7.0.2 | |
IBM Engineering Requirements Quality Assistant On-Premises | ||
IBM Engineering Test Management | =7.0.0 | |
IBM Engineering Test Management | =7.0.1 | |
IBM Engineering Test Management | =7.0.2 | |
IBM Engineering Workflow Management | =7.0 | |
IBM Engineering Workflow Management | =7.0.1 | |
IBM Engineering Workflow Management | =7.0.2 | |
IBM Rational Collaborative Lifecycle Management | =6.0.2 | |
IBM Rational Collaborative Lifecycle Management | =6.0.6 | |
IBM Rational Collaborative Lifecycle Management | =6.0.6.1 | |
IBM Rational DOORS Next Generation | =6.0.6 | |
IBM Rational DOORS Next Generation | =6.0.6.1 | |
IBM Rational DOORS Next Generation | =7.0 | |
IBM Rational DOORS Next Generation | =7.0.1 | |
IBM Rational DOORS Next Generation | =7.0.2 | |
IBM Rational Engineering Lifecycle Manager | =6.0.2 | |
IBM Rational Engineering Lifecycle Manager | =6.0.6 | |
IBM Rational Engineering Lifecycle Manager | =6.0.6.1 | |
IBM Rational Quality Manager | =6.0.6 | |
IBM Rational Quality Manager | =6.0.6.1 | |
IBM Rational Team Concert | =6.0.6 | |
IBM Rational Team Concert | =6.0.6.1 | |
IBM EWM | <=7.0.1 | |
IBM RTC | <=6.0.6.1 | |
IBM EWM | <=7.0 | |
IBM RTC | <=6.0.6 | |
IBM EWM | <=7.0.2 | |
IBM DOORS Next | <=7.0.2 | |
IBM DOORS Next | <=7.0 | |
IBM DOORS Next | <=7.0.1 | |
IBM RDNG | <=6.0.6.1 | |
IBM RDNG | <=6.0.6 | |
IBM Engineering Requirements Quality Assistant On-Premises | <=All | |
IBM RELM | <=6.0.6.1 | |
IBM ENI | <=7.0.1 | |
IBM RELM | <=6.0.6 | |
IBM ENI | <=7.0 | |
IBM RELM | <=6.0.2 | |
IBM ENI | <=7.0.2 | |
IBM RQM | <=6.0.6.1 | |
IBM ETM | <=7.0.1 | |
IBM RQM | <=6.0.6 | |
IBM ETM | <=7.0.0 | |
IBM ETM | <=7.0.2 | |
IBM CLM | <=6.0.6.1 | |
IBM CLM | <=6.0.6 | |
IBM ELM | <=7.0 | |
IBM CLM | <=6.0.2 | |
IBM ELM | <=7.0.1 | |
IBM ELM | <=7.0.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this IBM Jazz Foundation vulnerability is CVE-2020-5004.
The severity of CVE-2020-5004 is medium with a CVSS score of 5.4.
The affected software for CVE-2020-5004 includes IBM EWM versions up to 7.0.1, IBM RTC versions up to 6.0.6.1, and other related products.
This vulnerability allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.
To fix this vulnerability, IBM recommends applying the appropriate fixes and patches provided by IBM Security.