CVE-2017-1113

Summary

IBM Rational Team Concert (RTC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 121151.

Affected Software

VendorProductVersion RangeStatus
IBMRational Team Concert4.0affected
IBMRational Team Concert4.0.1affected
IBMRational Team Concert4.0.0.1affected
IBMRational Team Concert4.0.0.2affected
IBMRational Team Concert4.0.2affected
IBMRational Team Concert4.0.3affected
IBMRational Team Concert4.0.4affected
IBMRational Team Concert4.0.5affected
IBMRational Team Concert4.0.6affected
IBMRational Team Concert5.0affected
IBMRational Team Concert4.0.7affected
IBMRational Team Concert5.0.2affected
IBMRational Team Concert5.0.1affected
IBMRational Team Concert6.0affected
IBMRational Team Concert6.0.1affected
IBMRational Team Concert6.0.2affected
IBMRational Team Concert6.0.3affected

Weaknesses

  • Cross-Site Scripting

ADP Enrichment

CVE Program Container

Additional References

References