CVE-2023-43054: IBM Engineering Test Management cross-site scripting
IBM Engineering Test Management 7.0.2 and 7.0.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 267459.
Other sources
IBM Engineering Test Management is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-43054?
CVE-2023-43054 is classified as a stored cross-site scripting vulnerability that could potentially lead to serious security risks, including credential disclosure.
How do I fix CVE-2023-43054?
To mitigate CVE-2023-43054, users should update to the latest patched versions of IBM Engineering Test Management, specifically version 7.0.4 or above.
Which versions of IBM Engineering Test Management are affected by CVE-2023-43054?
CVE-2023-43054 affects IBM Engineering Test Management versions 7.0.2 and 7.0.3.
What type of vulnerability is CVE-2023-43054?
CVE-2023-43054 is a stored cross-site scripting vulnerability that allows the execution of arbitrary JavaScript code in the Web UI.
What can attackers achieve with CVE-2023-43054?
Exploitation of CVE-2023-43054 could allow attackers to embed malicious JavaScript, possibly leading to unauthorized access and credential theft.