NetSight
IP …
medium5.4

CVE-2017-1655

IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting.

Impact

IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133379.

Affected products

VendorProductAffected versions
IbmRational Collaborative Lifecycle Management
from 4.0 through 6.0.5
IbmRational Quality Manager
from 4.0 through 4.0.7
from 5.0 through 5.0.2
from 6.0 through 6.0.5
IbmRational Team Concert
from 4.0 through 4.0.7
from 5.0 through 5.0.2
from 6.0 through 6.0.5
IbmRational Doors Next Generation
from 4.0.1 through 4.0.7
from 5.0 through 5.0.2
from 6.0.0 through 6.0.5
IbmRational Engineering Lifecycle Manager
from 4.0.3 through 4.0.7
from 5.0 through 5.0.2
from 6.0 through 6.0.5
IbmRational Rhapsody Design Manager
from 4.0 through 4.0.7
from 5.0 through 5.0.2
from 6.0 through 6.0.5
IbmRational Software Architect Design Manager
from 4.0 through 4.0.7
from 5.0 through 5.0.2
after 6.0 through 6.0.1

Weakness classification

CWE-79

References