Description
IBM Rational Team Concert 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
IBM Corporation Rational Collaborative Lifecycle Management
3.0.1affected4.0affected3.0.1.6affected4.0.1affected4.0.2affected4.0.3affected4.0.4affected4.0.5affected4.0.6affected5.0affected4.0.7affected5.0.1affected5.0.2affected6.0affected6.0.1affected6.0.2affected6.0.3affected