Description
IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191396.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
IBM Rational Engineering Lifecycle Manager
6.0.2affected6.0.6affected6.0.6.1affected7.0affected7.0.1affected
IBM Rational Quality Manager
6.0.2affected6.0.6affected6.0.6.1affected
IBM Rational Team Concert
6.0.2affected6.0.6affected6.0.6.1affected
IBM Rational Collaborative Lifecycle Management
6.0.2affected6.0.6affected6.0.6.1affected
IBM Rational DOORS Next Generation
6.0.2affected6.0.6affected6.0.6.1affected7.0affected7.0.1affected7.0.2affected
IBM Engineering Test Management
7.0.0affected7.0.1affected7.0.2affected
IBM Engineering Lifecycle Optimization
7.0affected7.0.1affected7.0.2affected
IBM Engineering Workflow Management
7.0affected7.0.1affected7.0.2affected
IBM Rational Rhapsody Model Manager
6.0.6affected6.0.6.1affected7.0affected7.0.1affected6.0.2affected