IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143498.
Advisories
Source ID Title
EUVD EUVD EUVD-2018-12164 IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143498.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2024-09-16T19:24:26.779Z

Reserved: 2017-12-13T00:00:00

Link: CVE-2018-1585

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-07-19T14:29:00.467

Modified: 2024-11-21T04:00:02.720

Link: CVE-2018-1585

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.