CVE-2020-4857

Published: Mar 4, 2021Modified: Nov 21, 2024

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190460.

Affected (23)

Products: Ibm: Doors Next, Engineering Lifecycle Management, Engineering Requirements Quality Assistant On Premises, Engineering Test Management, Engineering Workflow Management, Global Configuration Management, Rational Doors Next Generation, Rational Quality Manager, Rational Team Concert

Ibm

9 products

Doors Next

Engineering Lifecycle Management

Engineering Requirements Quality Assistant On Premises

Engineering Test Management

Engineering Workflow Management

Global Configuration Management

Rational Doors Next Generation

Rational Quality Manager

Rational Team Concert

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Ibm Doors Next	Version 7.0.1
Ibm Doors Next	Version 7.0.2
Ibm Doors Next	Version 7.0
Ibm Engineering Lifecycle Management	Version 7.0.1
Ibm Engineering Lifecycle Management	Version 7.0.2
Ibm Engineering Lifecycle Management	Version 7.0
Ibm Engineering Requirements Quality Assistant On Premises	All versions
Ibm Engineering Test Management	Version 7.0.0
Ibm Engineering Test Management	Version 7.0.1
Ibm Engineering Test Management	Version 7.0.2
Ibm Engineering Workflow Management	Version 7.0.1
Ibm Engineering Workflow Management	Version 7.0.2
Ibm Engineering Workflow Management	Version 7.0
Ibm Global Configuration Management	All versions
Ibm Rational Doors Next Generation	Version 6.0.2
Ibm Rational Doors Next Generation	Version 6.0.6.1
Ibm Rational Doors Next Generation	Version 6.0.6
Ibm Rational Quality Manager	Version 6.0.2
Ibm Rational Quality Manager	Version 6.0.6.1
Ibm Rational Quality Manager	Version 6.0.6
Ibm Rational Team Concert	Version 6.0.2
Ibm Rational Team Concert	Version 6.0.6.1
Ibm Rational Team Concert	Version 6.0.6