CVE-2018-1910

IBM Rational Engineering Lifecycle Manager (REL M) versions 5.0 through 6.0.6 are affected by a cross-site scripting (XSS) vulnerability that lets an attacker embed arbitrary JavaScript in the Web UI, potentially leading to credential disclosure within a trusted session. Root cause: improper hand...