CVE-2017-1717

Summary

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134796.

Affected Software

VendorProductVersion RangeStatus
IBMRational Quality Manager5.0affected
IBMRational Quality Manager5.0.1affected
IBMRational Quality Manager5.0.2affected
IBMRational Quality Manager6.0affected
IBMRational Quality Manager6.0.1affected
IBMRational Quality Manager6.0.2affected
IBMRational Quality Manager6.0.3affected
IBMRational Quality Manager6.0.4affected
IBMRational Quality Manager6.0.5affected
IBMRational Collaborative Lifecycle Management5.0affected
IBMRational Collaborative Lifecycle Management5.0.1affected
IBMRational Collaborative Lifecycle Management5.0.2affected
IBMRational Collaborative Lifecycle Management6.0affected
IBMRational Collaborative Lifecycle Management6.0.1affected
IBMRational Collaborative Lifecycle Management6.0.2affected
IBMRational Collaborative Lifecycle Management6.0.3affected
IBMRational Collaborative Lifecycle Management6.0.4affected
IBMRational Collaborative Lifecycle Management6.0.5affected

Weaknesses

  • Cross-Site Scripting

ADP Enrichment

CVE Program Container

Additional References

References