CVE-2018-1762

Published: Nov 29, 2018Modified: Nov 21, 2024

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148616.

Affected (13)

Products: Ibm: Rational Collaborative Lifecycle Management, Rational Doors Next Generation, Rational Engineering Lifecycle Manager, Rational Quality Manager, Rational Rhapsody Design Manager, Rational Software Architect Design Manager, Rational Team Concert

Ibm

7 products

Rational Collaborative Lifecycle Management

Rational Doors Next Generation

Rational Engineering Lifecycle Manager

Rational Quality Manager

Rational Rhapsody Design Manager

Rational Software Architect Design Manager

Rational Team Concert

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Collaborative Lifecycle Management	5.0.0 ≤ version ≤ 6.0.6
Ibm Rational Doors Next Generation	5.0.0 ≤ version ≤ 5.0.2
Ibm Rational Doors Next Generation	6.0.0 ≤ version ≤ 6.0.6
Ibm Rational Engineering Lifecycle Manager	5.0.0 ≤ version ≤ 5.0.2
Ibm Rational Engineering Lifecycle Manager	6.0.0 ≤ version ≤ 6.0.6
Ibm Rational Quality Manager	5.0.0 ≤ version ≤ 5.0.2
Ibm Rational Quality Manager	6.0.0 ≤ version ≤ 6.0.6
Ibm Rational Rhapsody Design Manager	5.0.0 ≤ version ≤ 5.0.2
Ibm Rational Rhapsody Design Manager	6.0.0 ≤ version ≤ 6.0.6
Ibm Rational Software Architect Design Manager	5.0.0 ≤ version ≤ 5.0.2
Ibm Rational Software Architect Design Manager	6.0.0 ≤ version ≤ 6.0.1
Ibm Rational Team Concert	5.0.0 ≤ version ≤ 5.0.2
Ibm Rational Team Concert	6.0.0 ≤ version ≤ 6.0.6