CVE-2018-1535

IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124557.

Score

CVSS 3.0 5.4 Medium

Status

Modified - psirt@us.ibm.com

Published

2018-07-19

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Rational Rhapsody Design Manager (Ibm)
• Rational Software Architect Design Manager (Ibm)

References

• http://www.ibm.com/support/docview.wss?uid=ibm10716029
• https://exchange.xforce.ibmcloud.com/vulnerabilities/142557