PT-2018-6508

Name of the Vulnerable Software and Affected Versions: IBM Rational Quality Manager versions 5.0 through 5.0.2 IBM Rational Quality Manager versions 6.0 through 6.0.5 Description: The issue allows an authenticated user to obtain elevated privileges. Recommendations: For versions 5.0 through 5.0.2...

PT-2018-12321

Name of the Vulnerable Software and Affected Versions IBM Rational Team Concert versions 5.0 through 5.0.2 IBM Rational Team Concert versions 6.0 through 6.0.5 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially...

PT-2018-12949

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager versions 5.0 through 5.0.2 IBM Rational Quality Manager versions 6.0 through 6.0.5 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

IBM Jazz Foundation Information Disclosure Vulnerability (CNVD-2018-23241)

IBM Rational Collaborative Lifecycle Management CLM is a set of collaborative lifecycle management solutions.Rational Quality Manager RQM is a set of collaborative, web-based quality management solutions. IBM Rational Collaborative Lifecycle Management CLM is a collaborative lifecycle management...

Cross-site scripting vulnerability in multiple IBM products (CNVD-2018-19530)

IBM Rational Collaborative Lifecycle Management CLM is a set of collaborative lifecycle management solutions.Rational Quality Manager RQM is a set of collaborative, web-based quality management solutions. IBM Rational Collaborative Lifecycle Management CLM is a collaborative lifecycle management...

PT-2018-6474

Name of the Vulnerable Software and Affected Versions: IBM Rational Quality Manager versions 5.0 through 5.0.2 IBM Rational Quality Manager versions 6.0 through 6.0.5 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

IBM Rational Quality Manager HTML Injection Vulnerability

IBM Rational Quality Manager RQM is a collaborative, Web-based quality management solution from IBM. The program provides test planning and test evaluation management methods within the entire software development lifecycle, and the ability to share information, automation to accelerate the proje...

PT-2018-6592

Name of the Vulnerable Software and Affected Versions: IBM Rational Quality Manager versions 5.0 through 5.0.2 IBM Rational Quality Manager versions 6.0 through 6.0.5 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

PT-2018-13053

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager versions 5.0 through 5.0.2 IBM Rational Quality Manager versions 6.0 through 6.0.5 Description The issue allows a remote attacker to exploit the system using specially-crafted URLs, leading to HTTP response splitti...

PT-2018-6594

Name of the Vulnerable Software and Affected Versions: IBM Rational Quality Manager versions 5.0 through 5.0.2 IBM Rational Quality Manager versions 6.0 through 6.0.5 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

PT-2018-6593

Name of the Vulnerable Software and Affected Versions: IBM Rational Quality Manager versions 5.0 through 5.0.2 IBM Rational Quality Manager versions 6.0 through 6.0.5 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and...

PT-2018-12328

Name of the Vulnerable Software and Affected Versions IBM Rational Team Concert versions 5.0 through 5.0.2 IBM Rational Team Concert versions 6.0 through 6.0.5 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially...

PT-2018-12947

Name of the Vulnerable Software and Affected Versions IBM Rational Team Concert versions 5.0 through 5.0.2 IBM Rational Team Concert versions 6.0 through 6.0.5 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially...

IBM Rational Quality Manager HTML Injection Vulnerability (CNVD-2018-19534)

IBM Rational Quality Manager RQM is a collaborative, Web-based quality management solution from IBM. The program provides test planning and test evaluation management methods within the entire software development lifecycle, and the ability to share information, automation to accelerate the proje...

Information Disclosure Vulnerability in Multiple IBM Products (CNVD-2018-19536)

IBM Rational Collaborative Lifecycle Management CLM is a set of collaborative lifecycle management solutions.Rational Quality Manager RQM is a set of collaborative, web-based quality management solutions. IBM Rational Collaborative Lifecycle Management CLM is a collaborative lifecycle management...

CVE-2017-1793: Improper Neutralization of Input During Web Page Generation

IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

Design/Logic Flaw

Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests. IBM X-Force ID: 131758...

CVE-2017-1559

Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests. IBM X-Force ID: 131758...

CVE-2017-1559

Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests. IBM X-Force ID: 131758...

CVE-2017-1559

CVE-2017-1559 affects IBM Jazz-based Rational CLM/RQM/RRTC etc. products; the issue allows disclosure of sensitive information when an attacker intercepts vulnerable requests. The IBM bulletin lists impacted products (CLM 5.0–6.0.5, RQM, RTC, RDNG, RELM, RSA DM, Rhapsody DM, etc.) and provides re...