PT-2016-4152
CVE-2016-0331
·
Published
2016-09-12
·
Updated
2017-07-30
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
IBM Rational Team Concert versions 6.0.1 through 6.0.2 before 6.0.2 iFix2
IBM Rational Collaborative Lifecycle Management versions 6.0.1 through 6.0.2 before 6.0.2 iFix2
Description
A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Recommendations
For IBM Rational Team Concert versions 6.0.1 through 6.0.2, apply iFix2 to resolve the issue.
For IBM Rational Collaborative Lifecycle Management versions 6.0.1 through 6.0.2, apply iFix2 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾