CVE-2017-1169

Summary

IBM DOORS next Generation (DNG/RRC) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123188.

Affected Software

VendorProductVersion RangeStatus
IBMRational Collaborative Lifecycle Management4.0affected
IBMRational Collaborative Lifecycle Management4.0.1affected
IBMRational Collaborative Lifecycle Management4.0.2affected
IBMRational Collaborative Lifecycle Management4.0.3affected
IBMRational Collaborative Lifecycle Management4.0.4affected
IBMRational Collaborative Lifecycle Management4.0.5affected
IBMRational Collaborative Lifecycle Management4.0.6affected
IBMRational Collaborative Lifecycle Management5.0affected
IBMRational Collaborative Lifecycle Management4.0.7affected
IBMRational Collaborative Lifecycle Management5.0.1affected
IBMRational Collaborative Lifecycle Management5.0.2affected
IBMRational Collaborative Lifecycle Management6.0affected
IBMRational Collaborative Lifecycle Management6.0.1affected
IBMRational Collaborative Lifecycle Management6.0.2affected
IBMRational Collaborative Lifecycle Management6.0.3affected
IBMRational Collaborative Lifecycle Management6.0.4affected

Weaknesses

  • Cross-Site Scripting

ADP Enrichment

CVE Program Container

Additional References

References