Security Bulletin: Command Injection Vulnerability in IBM® Rational® Quality Manager (CVE-2016-0326)

Summary IBM® Rational® Quality Manager could allow an authenticated attacker to inject commands through a specially crafted HTML request that would be executed by the operating system with user privileges. Vulnerability Details CVEID: CVE-2016-0326 DESCRIPTION: IBM Rational Quality Manager could...

CVE-2016-0326

Summary: IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management (CLM) are affected by a command injection vulnerability (CVE-2016-0326). An authenticated attacker can inject commands via a specially crafted HTML request, causing OS commands to execute with the user’s p...