NetSight
IP …
medium5.4

CVE-2018-1762

IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting.

Impact

IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148616.

Affected products

VendorProductAffected versions
IbmRational Collaborative Lifecycle Management
from 5.0.0 through 6.0.6
IbmRational Doors Next Generation
from 5.0.0 through 5.0.2
from 6.0.0 through 6.0.6
IbmRational Engineering Lifecycle Manager
from 5.0.0 through 5.0.2
from 6.0.0 through 6.0.6
IbmRational Quality Manager
from 5.0.0 through 5.0.2
from 6.0.0 through 6.0.6
IbmRational Rhapsody Design Manager
from 5.0.0 through 5.0.2
from 6.0.0 through 6.0.6
IbmRational Software Architect Design Manager
from 5.0.0 through 5.0.2
from 6.0.0 through 6.0.1
IbmRational Team Concert
from 5.0.0 through 5.0.2
from 6.0.0 through 6.0.6

Weakness classification

CWE-79

References