CVE-2018-1892

Published: Jun 27, 2019Modified: Nov 21, 2024

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152156.

Affected (8)

Products: Ibm: Rational Collaborative Lifecycle Management, Rational Doors Next Generation, Rational Engineering Lifecycle Manager, Rational Quality Manager, Rational Rhapsody Design Manager, Rational Software Architect Design Manager, Rational Team Concert, Rhapsody Model Manager

Ibm

8 products

Rational Collaborative Lifecycle Management

Rational Doors Next Generation

Rational Engineering Lifecycle Manager

Rational Quality Manager

Rational Rhapsody Design Manager

Rational Software Architect Design Manager

Rational Team Concert

Rhapsody Model Manager

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Collaborative Lifecycle Management	6.0 ≤ version ≤ 6.0.6.1
Ibm Rational Doors Next Generation	6.0 ≤ version ≤ 6.0.6.1
Ibm Rational Engineering Lifecycle Manager	6.0 ≤ version ≤ 6.0.6.1
Ibm Rational Quality Manager	6.0 ≤ version ≤ 6.0.6.1
Ibm Rational Rhapsody Design Manager	6.0 ≤ version ≤ 6.0.6.1
Ibm Rational Software Architect Design Manager	6.0 ≤ version ≤ 6.0.1
Ibm Rational Team Concert	6.0 ≤ version ≤ 6.0.6.1
Ibm Rhapsody Model Manager	6.0.5 ≤ version ≤ 6.0.6.1