CVE-2018-1407

Summary

IBM Rational Team Concert 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138445.

Affected Software

VendorProductVersion RangeStatus
IBMRational Team Concert5.0affected
IBMRational Team Concert5.0.2affected
IBMRational Team Concert5.0.1affected
IBMRational Team Concert6.0affected
IBMRational Team Concert6.0.1affected
IBMRational Team Concert6.0.2affected
IBMRational Team Concert6.0.3affected
IBMRational Team Concert6.0.4affected
IBMRational Team Concert6.0.5affected

Weaknesses

  • Cross-Site Scripting

ADP Enrichment

CVE Program Container

Additional References

References