CVE-2020-5004

Summary

IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192957.

Affected Software

VendorProductVersion RangeStatus
IBMRational Team Concert6.0.6affected
IBMRational Team Concert6.0.6.1affected
IBMRational Quality Manager6.0.6affected
IBMRational Quality Manager6.0.6.1affected
IBMEngineering Test Management7.0.0affected
IBMEngineering Test Management7.0.1affected
IBMEngineering Test Management7.0.2affected
IBMEngineering Workflow Management7.0affected
IBMEngineering Workflow Management7.0.1affected
IBMEngineering Workflow Management7.0.2affected
IBMRational DOORS Next Generation6.0.6affected
IBMRational DOORS Next Generation6.0.6.1affected
IBMRational DOORS Next Generation7.0affected
IBMRational DOORS Next Generation7.0.1affected
IBMRational DOORS Next Generation7.0.2affected
IBMRational Collaborative Lifecycle Management6.0.2affected
IBMRational Collaborative Lifecycle Management6.0.6affected
IBMRational Collaborative Lifecycle Management6.0.6.1affected
IBMRational Engineering Lifecycle Manager6.0.2affected
IBMRational Engineering Lifecycle Manager6.0.6affected
IBMRational Engineering Lifecycle Manager6.0.6.1affected
IBMEngineering Lifecycle Optimization7.0affected
IBMEngineering Lifecycle Optimization7.0.1affected
IBMEngineering Lifecycle Optimization7.0.2affected

Weaknesses

  • Cross-Site Scripting

ADP Enrichment

CVE Program Container

Additional References

References