CVE-2020-5030: XSS

Q: What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2020-5030.

Q: What is the severity of CVE-2020-5030?

The severity of CVE-2020-5030 is medium with a severity value of 5.4.

Q: Which IBM products are affected by CVE-2020-5030?

IBM Engineering Test Management, IBM DOORS Next, IBM RDNG, IBM Pub, IBM RQM, IBM ETM, IBM CLM, IBM ELM, IBM RMM, IBM RELM, and IBM ENI are affected by CVE-2020-5030.

Q: What is the description of CVE-2020-5030?

CVE-2020-5030 is a vulnerability in IBM Jazz Foundation and IBM Engineering products that allows users to embed arbitrary JavaScript code in the Web UI, potentially leading to credentials disclosure within a trusted session.

Q: How can I fix CVE-2020-5030?

To fix CVE-2020-5030, it is recommended to apply the necessary security patches provided by IBM.

Published May 31, 2021

Updated

IBM Engineering Test Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Other sources

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 193737.

Affected Software

50 affected components

IBM DOORS Next<=7.0.2

IBM DOORS Next<=7.0

IBM DOORS Next<=7.0.1

IBM RDNG<=6.0.6.1

IBM RDNG<=6.0.6

IBM PUB<=7.0.1

IBM PUB<=7.0.2

IBM PUB<=7.0

IBM RQM<=6.0.6.1

IBM ETM<=7.0.1

IBM RQM<=6.0.6

IBM ETM<=7.0.0

IBM CLM<=6.0.6.1

IBM CLM<=6.0.6

IBM ELM<=7.0.2

IBM ELM<=7.0

IBM ELM<=7.0.1

IBM RMM<=6.0.6.1

IBM RMM<=6.0.6

IBM RMM<=7.0

IBM RELM<=6.0.6.1

IBM ENI<=7.0.1

IBM RELM<=6.0.6

IBM ENI<=7.0

IBM ENI<=7.0.2

IBM Collaborative Lifecycle Management=6.0.6

IBM Collaborative Lifecycle Management=6.0.6.1

IBM Engineering Lifecycle Management=7.0

IBM Engineering Lifecycle Management=7.0.1

IBM Engineering Lifecycle Management=7.0.2

IBM Engineering Lifecycle Optimization - Engineering Insights=7.0

IBM Engineering Lifecycle Optimization - Engineering Insights=7.0.1

IBM Engineering Lifecycle Optimization - Engineering Insights=7.0.2

IBM Engineering Lifecycle Optimization - Publishing=7.0

IBM Engineering Lifecycle Optimization - Publishing=7.0.1

IBM Engineering Lifecycle Optimization - Publishing=7.0.2

IBM Engineering Test Management=7.0.0

IBM Engineering Test Management=7.0.1

IBM Rational DOORS Next Generation=6.0.6

IBM Rational DOORS Next Generation=6.0.6.1

IBM Rational DOORS Next Generation=7.0

IBM Rational DOORS Next Generation=7.0.1

IBM Rational DOORS Next Generation=7.0.2

IBM Rational Engineering Lifecycle Manager=6.0.6

IBM Rational Engineering Lifecycle Manager=6.0.6.1

IBM Rational Quality Manager=6.0.6

IBM Rational Quality Manager=6.0.6.1

IBM Removable Media Manager=6.0.6

IBM Removable Media Manager=6.0.6.1

IBM Removable Media Manager=7.0

Remediation

Patch Available

https://www.ibm.com/support/pages/node/6457739

Event History

May 31, 2021

CVE Published

via IBM·12:00 AM

Jun 2, 2021

CVE Published

via MITRE·08:40 PM

Data Sourced

via MITRE·08:40 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-6457739

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2020-5030.

What is the severity of CVE-2020-5030?