CVE-2018-1536

Summary

IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142558.

Affected Software

VendorProductVersion RangeStatus
IBMRational Software Architect Design Manager5.0affected
IBMRational Software Architect Design Manager5.0.2affected
IBMRational Software Architect Design Manager5.0.1affected
IBMRational Software Architect Design Manager6.0affected
IBMRational Software Architect Design Manager6.0.1affected
IBMRational Rhapsody Design Manager5.0affected
IBMRational Rhapsody Design Manager5.0.2affected
IBMRational Rhapsody Design Manager5.0.1affected
IBMRational Rhapsody Design Manager6.0affected
IBMRational Rhapsody Design Manager6.0.1affected
IBMRational Rhapsody Design Manager6.0.2affected
IBMRational Rhapsody Design Manager6.0.3affected
IBMRational Rhapsody Design Manager6.0.4affected
IBMRational Rhapsody Design Manager6.0.5affected

Weaknesses

  • Cross-Site Scripting

ADP Enrichment

CVE Program Container

Additional References

References