PT-2018-5485
CVE-2017-1313
·
Publicado
2018-07-03
·
Atualizado
2019-10-09
Descrição por
CVSS 3.1
5.4
MédiaMétricasAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management versions 5.0 through 5.0.2
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.5
Description:
This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session. The vulnerability enables cross-site scripting.
Recommendations:
For versions 5.0 through 5.0.2, update to a version outside of this range to resolve the issue.
For versions 6.0 through 6.0.5, update to a version outside of this range to resolve the issue.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾