All the vulnerabilites related to IBM - Jazz Foundation
var-201803-1094
Vulnerability from variot
IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133127. Vendors have confirmed this vulnerability IBM X-Force ID: 133127 It is released as.Information may be obtained and information may be altered. Multiple IBM Products are prone to the following multiple security vulnerabilities: 1. An information-disclosure vulnerability 2. Multiple cross-site scripting vulnerability 3. An access-bypass vulnerability An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, gain unauthorized access to the affected application or to obtain sensitive information
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201803-1094", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "rational engineering lifecycle manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational engineering lifecycle manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0" }, { "model": "rational team concert", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational software architect design manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0" }, { "model": "rational collaborative lifecycle management", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0" }, { "model": "rational rhapsody design manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0" }, { "model": "rational software architect design manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "5.0" }, { "model": "rational engineering lifecycle manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational team concert", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0" }, { "model": "rational quality manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0" }, { "model": "rational doors next generation", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0.0" }, { "model": "rational doors next generation", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "5.0" }, { "model": "rational quality manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "5.0" }, { "model": "rational engineering lifecycle manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "5.0" }, { "model": "rational software architect design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational software architect design manager", "scope": "gt", "trust": 1.0, "vendor": "ibm", "version": "6.0" }, { "model": "rational doors next generation", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational rhapsody design manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0" }, { "model": "rational quality manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational collaborative lifecycle management", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational quality manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational software architect design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational team concert", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0" }, { "model": "rational rhapsody design manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "5.0" }, { "model": "rational doors next generation", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational software architect design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational quality manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational team concert", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "5.0" }, { "model": "rational doors next generation", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational engineering lifecycle manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational rhapsody design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational engineering lifecycle manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational quality manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0" }, { "model": "rational team concert", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational doors next generation", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational rhapsody design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational team concert", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational rhapsody design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational team concert", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "5.0" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.8, "vendor": "ibm", "version": "5.0 and 6.0" }, { "model": "rational doors next generation", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational engineering lifecycle manager", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational quality manager", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational rhapsody design manager", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational software architect design manager", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational team concert", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.6, "vendor": "ibm", "version": "6.0.0" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.6, "vendor": "ibm", "version": "5.0.0" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.0" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.0" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.7" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.0" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.0.2" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.0.1" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.0" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "jazz team server", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "0" }, { "model": "jazz foundation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "0" }, { "model": "rational team concert ifix3", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational team concert ifix16", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational team concert ifix25", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational quality manager ifix3", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational quality manager ifix16", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational quality manager ifix25", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational doors next generation ifix3", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational doors next generation ifix16", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational doors next generation ifix25", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational collaborative lifecycle management ifix3", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational collaborative lifecycle management ifix16", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational collaborative lifecycle management ifix25", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" } ], "sources": [ { "db": "BID", "id": "103477" }, { "db": "JVNDB", "id": "JVNDB-2018-003085" }, { "db": "CNNVD", "id": "CNNVD-201803-901" }, { "db": "NVD", "id": "CVE-2017-1629" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "cpe_match": [ { "cpe22Uri": "cpe:/a:ibm:rational_collaborative_lifecycle_management", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_doors_next_generation", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_engineering_lifecycle_manager", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_quality_manager", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_rhapsody_design_manager", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_software_architect_design_manager", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_team_concert", "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003085" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "IBM.", "sources": [ { "db": "BID", "id": "103477" } ], "trust": 0.3 }, "cve": "CVE-2017-1629", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 3.5, "confidentialityImpact": "NONE", "exploitabilityScore": 6.8, "id": "CVE-2017-1629", "impactScore": 2.9, "integrityImpact": "PARTIAL", "severity": "LOW", "trust": 1.8, "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "LOW", "attackVector": "NETWORK", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "exploitabilityScore": 2.3, "id": "CVE-2017-1629", "impactScore": 2.7, "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "trust": 2.8, "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.0" } ], "severity": [ { "author": "nvd@nist.gov", "id": "CVE-2017-1629", "trust": 1.0, "value": "MEDIUM" }, { "author": "psirt@us.ibm.com", "id": "CVE-2017-1629", "trust": 1.0, "value": "MEDIUM" }, { "author": "NVD", "id": "CVE-2017-1629", "trust": 0.8, "value": "Medium" }, { "author": "CNNVD", "id": "CNNVD-201803-901", "trust": 0.6, "value": "MEDIUM" } ] } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003085" }, { "db": "CNNVD", "id": "CNNVD-201803-901" }, { "db": "NVD", "id": "CVE-2017-1629" }, { "db": "NVD", "id": "CVE-2017-1629" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133127. Vendors have confirmed this vulnerability IBM X-Force ID: 133127 It is released as.Information may be obtained and information may be altered. Multiple IBM Products are prone to the following multiple security vulnerabilities:\n1. An information-disclosure vulnerability\n2. Multiple cross-site scripting vulnerability\n3. An access-bypass vulnerability\nAn attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, gain unauthorized access to the affected application or to obtain sensitive information", "sources": [ { "db": "NVD", "id": "CVE-2017-1629" }, { "db": "JVNDB", "id": "JVNDB-2018-003085" }, { "db": "BID", "id": "103477" } ], "trust": 1.89 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2017-1629", "trust": 2.7 }, { "db": "BID", "id": "103477", "trust": 1.9 }, { "db": "JVNDB", "id": "JVNDB-2018-003085", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201803-901", "trust": 0.6 } ], "sources": [ { "db": "BID", "id": "103477" }, { "db": "JVNDB", "id": "JVNDB-2018-003085" }, { "db": "CNNVD", "id": "CNNVD-201803-901" }, { "db": "NVD", "id": "CVE-2017-1629" } ] }, "id": "VAR-201803-1094", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "VARIoT devices database", "id": null } ], "trust": 0.23809524 }, "last_update_date": "2024-11-23T22:30:29.346000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "2014815", "trust": 0.8, "url": "http://www-01.ibm.com/support/docview.wss?uid=swg22014815" }, { "title": "ibm-jazz-cve20171629-xss (133127)", "trust": 0.8, "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/133127" }, { "title": "IBM Rational Collaborative Lifecycle Management Jazz Foundation Cross-site scripting vulnerability Repair measures", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=79398" } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003085" }, { "db": "CNNVD", "id": "CNNVD-201803-901" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-79", "trust": 1.8 } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003085" }, { "db": "NVD", "id": "CVE-2017-1629" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 1.6, "url": "http://www.ibm.com/support/docview.wss?uid=swg22014815" }, { "trust": 1.6, "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/133127" }, { "trust": 1.6, "url": "http://www.securityfocus.com/bid/103477" }, { "trust": 0.8, "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-1629" }, { "trust": 0.8, "url": "https://nvd.nist.gov/vuln/detail/cve-2017-1629" }, { "trust": 0.3, "url": "http://www.ibm.com" }, { "trust": 0.3, "url": "http://www-01.ibm.com/support/docview.wss?uid=swg22014815" } ], "sources": [ { "db": "BID", "id": "103477" }, { "db": "JVNDB", "id": "JVNDB-2018-003085" }, { "db": "CNNVD", "id": "CNNVD-201803-901" }, { "db": "NVD", "id": "CVE-2017-1629" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "BID", "id": "103477" }, { "db": "JVNDB", "id": "JVNDB-2018-003085" }, { "db": "CNNVD", "id": "CNNVD-201803-901" }, { "db": "NVD", "id": "CVE-2017-1629" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2018-03-20T00:00:00", "db": "BID", "id": "103477" }, { "date": "2018-05-14T00:00:00", "db": "JVNDB", "id": "JVNDB-2018-003085" }, { "date": "2018-03-26T00:00:00", "db": "CNNVD", "id": "CNNVD-201803-901" }, { "date": "2018-03-23T19:29:00.337000", "db": "NVD", "id": "CVE-2017-1629" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2018-03-20T00:00:00", "db": "BID", "id": "103477" }, { "date": "2018-05-14T00:00:00", "db": "JVNDB", "id": "JVNDB-2018-003085" }, { "date": "2019-10-17T00:00:00", "db": "CNNVD", "id": "CNNVD-201803-901" }, { "date": "2024-11-21T03:22:09.597000", "db": "NVD", "id": "CVE-2017-1629" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "CNNVD", "id": "CNNVD-201803-901" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "IBM Jazz Foundation Vulnerable to cross-site scripting", "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003085" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "XSS", "sources": [ { "db": "CNNVD", "id": "CNNVD-201803-901" } ], "trust": 0.6 } }
var-201803-0128
Vulnerability from variot
IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133379. Vendors have confirmed this vulnerability IBM X-Force ID: 133379 It is released as.Information may be obtained and information may be altered. Multiple IBM Products are prone to the following multiple security vulnerabilities: 1. An information-disclosure vulnerability 2. Multiple cross-site scripting vulnerability 3. An access-bypass vulnerability An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, gain unauthorized access to the affected application or to obtain sensitive information
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201803-0128", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "rational engineering lifecycle manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational engineering lifecycle manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0" }, { "model": "rational team concert", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational software architect design manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0" }, { "model": "rational collaborative lifecycle management", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0" }, { "model": "rational rhapsody design manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0" }, { "model": "rational software architect design manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "5.0" }, { "model": "rational engineering lifecycle manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational team concert", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0" }, { "model": "rational quality manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0" }, { "model": "rational doors next generation", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0.0" }, { "model": "rational doors next generation", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "5.0" }, { "model": "rational quality manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "5.0" }, { "model": "rational engineering lifecycle manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "5.0" }, { "model": "rational software architect design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational software architect design manager", "scope": "gt", "trust": 1.0, "vendor": "ibm", "version": "6.0" }, { "model": "rational doors next generation", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational rhapsody design manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0" }, { "model": "rational quality manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational collaborative lifecycle management", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational quality manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational software architect design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational team concert", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0" }, { "model": "rational rhapsody design manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "5.0" }, { "model": "rational doors next generation", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational software architect design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational quality manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational team concert", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "5.0" }, { "model": "rational doors next generation", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational engineering lifecycle manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational rhapsody design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational engineering lifecycle manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational quality manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0" }, { "model": "rational team concert", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational doors next generation", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational rhapsody design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational team concert", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational rhapsody design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational team concert", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "6.0" }, { "model": "rational team concert", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.8, "vendor": "ibm", "version": "5.0 and 6.0" }, { "model": "rational doors next generation", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational engineering lifecycle manager", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational quality manager", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational rhapsody design manager", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational software architect design manager", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational team concert", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.6, "vendor": "ibm", "version": "6.0.0" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.0" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.0" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.7" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.0" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.0.2" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.0.1" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.0" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "jazz team server", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "0" }, { "model": "jazz foundation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "0" }, { "model": "rational team concert ifix3", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational team concert ifix16", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational team concert ifix25", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational quality manager ifix3", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational quality manager ifix16", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational quality manager ifix25", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational doors next generation ifix3", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational doors next generation ifix16", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational doors next generation ifix25", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational collaborative lifecycle management ifix3", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational collaborative lifecycle management ifix16", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational collaborative lifecycle management ifix25", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" } ], "sources": [ { "db": "BID", "id": "103477" }, { "db": "JVNDB", "id": "JVNDB-2018-003086" }, { "db": "CNNVD", "id": "CNNVD-201803-900" }, { "db": "NVD", "id": "CVE-2017-1655" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "cpe_match": [ { "cpe22Uri": "cpe:/a:ibm:rational_collaborative_lifecycle_management", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_doors_next_generation", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_engineering_lifecycle_manager", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_quality_manager", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_rhapsody_design_manager", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_software_architect_design_manager", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_team_concert", "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003086" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "IBM.", "sources": [ { "db": "BID", "id": "103477" } ], "trust": 0.3 }, "cve": "CVE-2017-1655", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 3.5, "confidentialityImpact": "NONE", "exploitabilityScore": 6.8, "id": "CVE-2017-1655", "impactScore": 2.9, "integrityImpact": "PARTIAL", "severity": "LOW", "trust": 1.8, "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "LOW", "attackVector": "NETWORK", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "exploitabilityScore": 2.3, "id": "CVE-2017-1655", "impactScore": 2.7, "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "trust": 2.8, "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.0" } ], "severity": [ { "author": "nvd@nist.gov", "id": "CVE-2017-1655", "trust": 1.0, "value": "MEDIUM" }, { "author": "psirt@us.ibm.com", "id": "CVE-2017-1655", "trust": 1.0, "value": "MEDIUM" }, { "author": "NVD", "id": "CVE-2017-1655", "trust": 0.8, "value": "Medium" }, { "author": "CNNVD", "id": "CNNVD-201803-900", "trust": 0.6, "value": "MEDIUM" } ] } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003086" }, { "db": "CNNVD", "id": "CNNVD-201803-900" }, { "db": "NVD", "id": "CVE-2017-1655" }, { "db": "NVD", "id": "CVE-2017-1655" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133379. Vendors have confirmed this vulnerability IBM X-Force ID: 133379 It is released as.Information may be obtained and information may be altered. Multiple IBM Products are prone to the following multiple security vulnerabilities:\n1. An information-disclosure vulnerability\n2. Multiple cross-site scripting vulnerability\n3. An access-bypass vulnerability\nAn attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, gain unauthorized access to the affected application or to obtain sensitive information", "sources": [ { "db": "NVD", "id": "CVE-2017-1655" }, { "db": "JVNDB", "id": "JVNDB-2018-003086" }, { "db": "BID", "id": "103477" } ], "trust": 1.89 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2017-1655", "trust": 2.7 }, { "db": "BID", "id": "103477", "trust": 1.9 }, { "db": "JVNDB", "id": "JVNDB-2018-003086", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201803-900", "trust": 0.6 } ], "sources": [ { "db": "BID", "id": "103477" }, { "db": "JVNDB", "id": "JVNDB-2018-003086" }, { "db": "CNNVD", "id": "CNNVD-201803-900" }, { "db": "NVD", "id": "CVE-2017-1655" } ] }, "id": "VAR-201803-0128", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "VARIoT devices database", "id": null } ], "trust": 0.23809524 }, "last_update_date": "2024-11-23T22:30:29.430000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "2014815", "trust": 0.8, "url": "http://www-01.ibm.com/support/docview.wss?uid=swg22014815" }, { "title": "ibm-jazz-cve20171655-xss (133379)", "trust": 0.8, "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/133379" }, { "title": "IBM Rational Collaborative Lifecycle Management Jazz Foundation Fixes for cross-site scripting vulnerabilities", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=79397" } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003086" }, { "db": "CNNVD", "id": "CNNVD-201803-900" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-79", "trust": 1.8 } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003086" }, { "db": "NVD", "id": "CVE-2017-1655" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 1.6, "url": "http://www.ibm.com/support/docview.wss?uid=swg22014815" }, { "trust": 1.6, "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/133379" }, { "trust": 1.6, "url": "http://www.securityfocus.com/bid/103477" }, { "trust": 0.8, "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-1655" }, { "trust": 0.8, "url": "https://nvd.nist.gov/vuln/detail/cve-2017-1655" }, { "trust": 0.3, "url": "http://www.ibm.com" }, { "trust": 0.3, "url": "http://www-01.ibm.com/support/docview.wss?uid=swg22014815" } ], "sources": [ { "db": "BID", "id": "103477" }, { "db": "JVNDB", "id": "JVNDB-2018-003086" }, { "db": "CNNVD", "id": "CNNVD-201803-900" }, { "db": "NVD", "id": "CVE-2017-1655" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "BID", "id": "103477" }, { "db": "JVNDB", "id": "JVNDB-2018-003086" }, { "db": "CNNVD", "id": "CNNVD-201803-900" }, { "db": "NVD", "id": "CVE-2017-1655" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2018-03-20T00:00:00", "db": "BID", "id": "103477" }, { "date": "2018-05-14T00:00:00", "db": "JVNDB", "id": "JVNDB-2018-003086" }, { "date": "2018-03-26T00:00:00", "db": "CNNVD", "id": "CNNVD-201803-900" }, { "date": "2018-03-23T19:29:00.387000", "db": "NVD", "id": "CVE-2017-1655" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2018-03-20T00:00:00", "db": "BID", "id": "103477" }, { "date": "2018-05-14T00:00:00", "db": "JVNDB", "id": "JVNDB-2018-003086" }, { "date": "2019-10-17T00:00:00", "db": "CNNVD", "id": "CNNVD-201803-900" }, { "date": "2024-11-21T03:22:10.917000", "db": "NVD", "id": "CVE-2017-1655" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "CNNVD", "id": "CNNVD-201803-900" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "IBM Jazz Foundation Vulnerable to cross-site scripting", "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003086" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "XSS", "sources": [ { "db": "CNNVD", "id": "CNNVD-201803-900" } ], "trust": 0.6 } }
var-201803-1089
Vulnerability from variot
IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to obtain sensitive information from a specially crafted HTTP request that could be used to aid future attacks. IBM X-Force ID: 129970. Vendors have confirmed this vulnerability IBM X-Force ID: 129970 It is released as.Information may be obtained. Multiple IBM Products are prone to the following multiple security vulnerabilities: 1. An information-disclosure vulnerability 2. Multiple cross-site scripting vulnerability 3. An access-bypass vulnerability An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, gain unauthorized access to the affected application or to obtain sensitive information
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201803-1089", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "rational team concert", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational team concert", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational quality manager", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational quality manager", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational quality manager", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.0" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational doors next generation", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational doors next generation", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 1.1, "vendor": "ibm", "version": "6.0" }, { "model": "rational engineering lifecycle manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 1.0, "vendor": "ibm", "version": "5.0.0" }, { "model": "rational doors next generation", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0.0" }, { "model": "rational team concert", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0.0" }, { "model": "rational engineering lifecycle manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0.0" }, { "model": "rational doors next generation", "scope": "eq", "trust": 1.0, "vendor": "ibm", "version": "5.0.0" }, { "model": "rational software architect design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational doors next generation", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational quality manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational rhapsody design manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 1.0, "vendor": "ibm", "version": "5.0.0" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 1.0, "vendor": "ibm", "version": "5.0.0" }, { "model": "rational rhapsody design manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0.0" }, { "model": "rational collaborative lifecycle management", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational quality manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 1.0, "vendor": "ibm", "version": "6.0.0" }, { "model": "rational doors next generation", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational team concert", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0.0" }, { "model": "rational doors next generation", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational software architect design manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0.0" }, { "model": "rational engineering lifecycle manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational team concert", "scope": "eq", "trust": 1.0, "vendor": "ibm", "version": "5.0.0" }, { "model": "rational rhapsody design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational collaborative lifecycle management", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0.0" }, { "model": "rational engineering lifecycle manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational quality manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0" }, { "model": "rational team concert", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational rhapsody design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational quality manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0.0" }, { "model": "rational team concert", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "4.0" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.8, "vendor": "ibm", "version": "5.0" }, { "model": "rational doors next generation", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational engineering lifecycle manager", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational quality manager", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational rhapsody design manager", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational software architect design manager", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational team concert", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.0" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.7" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.0" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.0.2" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.0.1" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.0" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "jazz team server", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "0" }, { "model": "jazz foundation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "0" }, { "model": "rational team concert ifix3", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational team concert ifix16", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational team concert ifix25", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational quality manager ifix3", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational quality manager ifix16", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational quality manager ifix25", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational doors next generation ifix3", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational doors next generation ifix16", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational doors next generation ifix25", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational collaborative lifecycle management ifix3", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational collaborative lifecycle management ifix16", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational collaborative lifecycle management ifix25", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" } ], "sources": [ { "db": "BID", "id": "103477" }, { "db": "JVNDB", "id": "JVNDB-2018-003247" }, { "db": "CNNVD", "id": "CNNVD-201803-903" }, { "db": "NVD", "id": "CVE-2017-1524" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "cpe_match": [ { "cpe22Uri": "cpe:/a:ibm:rational_collaborative_lifecycle_management", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_doors_next_generation", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_engineering_lifecycle_manager", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_quality_manager", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_rhapsody_design_manager", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_software_architect_design_manager", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_team_concert", "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003247" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "IBM.", "sources": [ { "db": "BID", "id": "103477" } ], "trust": 0.3 }, "cve": "CVE-2017-1524", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 8.0, "id": "CVE-2017-1524", "impactScore": 2.9, "integrityImpact": "NONE", "severity": "MEDIUM", "trust": 1.8, "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "LOW", "attackVector": "NETWORK", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "exploitabilityScore": 2.8, "id": "CVE-2017-1524", "impactScore": 1.4, "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "trust": 2.8, "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" } ], "severity": [ { "author": "nvd@nist.gov", "id": "CVE-2017-1524", "trust": 1.0, "value": "MEDIUM" }, { "author": "psirt@us.ibm.com", "id": "CVE-2017-1524", "trust": 1.0, "value": "MEDIUM" }, { "author": "NVD", "id": "CVE-2017-1524", "trust": 0.8, "value": "Medium" }, { "author": "CNNVD", "id": "CNNVD-201803-903", "trust": 0.6, "value": "MEDIUM" } ] } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003247" }, { "db": "CNNVD", "id": "CNNVD-201803-903" }, { "db": "NVD", "id": "CVE-2017-1524" }, { "db": "NVD", "id": "CVE-2017-1524" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to obtain sensitive information from a specially crafted HTTP request that could be used to aid future attacks. IBM X-Force ID: 129970. Vendors have confirmed this vulnerability IBM X-Force ID: 129970 It is released as.Information may be obtained. Multiple IBM Products are prone to the following multiple security vulnerabilities:\n1. An information-disclosure vulnerability\n2. Multiple cross-site scripting vulnerability\n3. An access-bypass vulnerability\nAn attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, gain unauthorized access to the affected application or to obtain sensitive information", "sources": [ { "db": "NVD", "id": "CVE-2017-1524" }, { "db": "JVNDB", "id": "JVNDB-2018-003247" }, { "db": "BID", "id": "103477" } ], "trust": 1.89 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2017-1524", "trust": 2.7 }, { "db": "BID", "id": "103477", "trust": 1.9 }, { "db": "JVNDB", "id": "JVNDB-2018-003247", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201803-903", "trust": 0.6 } ], "sources": [ { "db": "BID", "id": "103477" }, { "db": "JVNDB", "id": "JVNDB-2018-003247" }, { "db": "CNNVD", "id": "CNNVD-201803-903" }, { "db": "NVD", "id": "CVE-2017-1524" } ] }, "id": "VAR-201803-1089", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "VARIoT devices database", "id": null } ], "trust": 0.23809524 }, "last_update_date": "2024-11-23T22:30:29.318000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "2014815", "trust": 0.8, "url": "http://www-01.ibm.com/support/docview.wss?uid=swg22014815" }, { "title": "ibm-jazz-cve20171524-info-disc (129970)", "trust": 0.8, "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129970" }, { "title": "IBM Rational Collaborative Lifecycle Management Jazz Foundation Security vulnerabilities", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=79400" } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003247" }, { "db": "CNNVD", "id": "CNNVD-201803-903" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-200", "trust": 1.8 } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003247" }, { "db": "NVD", "id": "CVE-2017-1524" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 1.6, "url": "http://www.ibm.com/support/docview.wss?uid=swg22014815" }, { "trust": 1.6, "url": "http://www.securityfocus.com/bid/103477" }, { "trust": 1.6, "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129970" }, { "trust": 0.8, "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-1524" }, { "trust": 0.8, "url": "https://nvd.nist.gov/vuln/detail/cve-2017-1524" }, { "trust": 0.3, "url": "http://www.ibm.com" }, { "trust": 0.3, "url": "http://www-01.ibm.com/support/docview.wss?uid=swg22014815" } ], "sources": [ { "db": "BID", "id": "103477" }, { "db": "JVNDB", "id": "JVNDB-2018-003247" }, { "db": "CNNVD", "id": "CNNVD-201803-903" }, { "db": "NVD", "id": "CVE-2017-1524" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "BID", "id": "103477" }, { "db": "JVNDB", "id": "JVNDB-2018-003247" }, { "db": "CNNVD", "id": "CNNVD-201803-903" }, { "db": "NVD", "id": "CVE-2017-1524" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2018-03-20T00:00:00", "db": "BID", "id": "103477" }, { "date": "2018-05-18T00:00:00", "db": "JVNDB", "id": "JVNDB-2018-003247" }, { "date": "2018-03-26T00:00:00", "db": "CNNVD", "id": "CNNVD-201803-903" }, { "date": "2018-03-23T19:29:00.230000", "db": "NVD", "id": "CVE-2017-1524" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2018-03-20T00:00:00", "db": "BID", "id": "103477" }, { "date": "2018-05-18T00:00:00", "db": "JVNDB", "id": "JVNDB-2018-003247" }, { "date": "2019-10-17T00:00:00", "db": "CNNVD", "id": "CNNVD-201803-903" }, { "date": "2024-11-21T03:22:01.087000", "db": "NVD", "id": "CVE-2017-1524" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "CNNVD", "id": "CNNVD-201803-903" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "IBM Jazz Foundation Vulnerable to information disclosure", "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003247" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "information disclosure", "sources": [ { "db": "CNNVD", "id": "CNNVD-201803-903" } ], "trust": 0.6 } }
var-201803-1350
Vulnerability from variot
IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136006. Vendors have confirmed this vulnerability IBM X-Force ID: 136006 It is released as.Information may be obtained and information may be altered. Multiple IBM Products are prone to the following multiple security vulnerabilities: 1. An information-disclosure vulnerability 2. Multiple cross-site scripting vulnerability 3. An access-bypass vulnerability An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, gain unauthorized access to the affected application or to obtain sensitive information
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201803-1350", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "rational engineering lifecycle manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational engineering lifecycle manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0" }, { "model": "rational team concert", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational software architect design manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0" }, { "model": "rational collaborative lifecycle management", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0" }, { "model": "rational rhapsody design manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0" }, { "model": "rational software architect design manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "5.0" }, { "model": "rational engineering lifecycle manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational team concert", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0" }, { "model": "rational quality manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0" }, { "model": "rational doors next generation", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0.0" }, { "model": "rational doors next generation", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "5.0" }, { "model": "rational quality manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "5.0" }, { "model": "rational engineering lifecycle manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "5.0" }, { "model": "rational software architect design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational software architect design manager", "scope": "gt", "trust": 1.0, "vendor": "ibm", "version": "6.0" }, { "model": "rational doors next generation", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational rhapsody design manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0" }, { "model": "rational quality manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational collaborative lifecycle management", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational quality manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational software architect design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational team concert", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0" }, { "model": "rational rhapsody design manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "5.0" }, { "model": "rational doors next generation", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational software architect design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational quality manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational team concert", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "5.0" }, { "model": "rational doors next generation", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational engineering lifecycle manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational rhapsody design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational engineering lifecycle manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational quality manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0" }, { "model": "rational team concert", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational doors next generation", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational rhapsody design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational team concert", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational rhapsody design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "5.0" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.8, "vendor": "ibm", "version": "5.0 and 6.0" }, { "model": "rational doors next generation", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational engineering lifecycle manager", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational quality manager", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational rhapsody design manager", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational software architect design manager", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational team concert", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.6, "vendor": "ibm", "version": "6.0.0" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.6, "vendor": "ibm", "version": "5.0.0" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.0" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.0" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.7" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.0" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.0.2" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.0.1" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.0" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "jazz team server", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "0" }, { "model": "jazz foundation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "0" }, { "model": "rational team concert ifix3", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational team concert ifix16", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational team concert ifix25", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational quality manager ifix3", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational quality manager ifix16", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational quality manager ifix25", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational doors next generation ifix3", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational doors next generation ifix16", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational doors next generation ifix25", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational collaborative lifecycle management ifix3", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational collaborative lifecycle management ifix16", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational collaborative lifecycle management ifix25", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" } ], "sources": [ { "db": "BID", "id": "103477" }, { "db": "JVNDB", "id": "JVNDB-2018-003087" }, { "db": "CNNVD", "id": "CNNVD-201803-899" }, { "db": "NVD", "id": "CVE-2017-1762" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "cpe_match": [ { "cpe22Uri": "cpe:/a:ibm:rational_collaborative_lifecycle_management", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_doors_next_generation", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_engineering_lifecycle_manager", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_quality_manager", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_rhapsody_design_manager", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_software_architect_design_manager", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_team_concert", "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003087" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "IBM.", "sources": [ { "db": "BID", "id": "103477" } ], "trust": 0.3 }, "cve": "CVE-2017-1762", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 3.5, "confidentialityImpact": "NONE", "exploitabilityScore": 6.8, "id": "CVE-2017-1762", "impactScore": 2.9, "integrityImpact": "PARTIAL", "severity": "LOW", "trust": 1.8, "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "LOW", "attackVector": "NETWORK", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "exploitabilityScore": 2.3, "id": "CVE-2017-1762", "impactScore": 2.7, "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "trust": 2.8, "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.0" } ], "severity": [ { "author": "nvd@nist.gov", "id": "CVE-2017-1762", "trust": 1.0, "value": "MEDIUM" }, { "author": "psirt@us.ibm.com", "id": "CVE-2017-1762", "trust": 1.0, "value": "MEDIUM" }, { "author": "NVD", "id": "CVE-2017-1762", "trust": 0.8, "value": "Medium" }, { "author": "CNNVD", "id": "CNNVD-201803-899", "trust": 0.6, "value": "MEDIUM" } ] } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003087" }, { "db": "CNNVD", "id": "CNNVD-201803-899" }, { "db": "NVD", "id": "CVE-2017-1762" }, { "db": "NVD", "id": "CVE-2017-1762" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136006. Vendors have confirmed this vulnerability IBM X-Force ID: 136006 It is released as.Information may be obtained and information may be altered. Multiple IBM Products are prone to the following multiple security vulnerabilities:\n1. An information-disclosure vulnerability\n2. Multiple cross-site scripting vulnerability\n3. An access-bypass vulnerability\nAn attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, gain unauthorized access to the affected application or to obtain sensitive information", "sources": [ { "db": "NVD", "id": "CVE-2017-1762" }, { "db": "JVNDB", "id": "JVNDB-2018-003087" }, { "db": "BID", "id": "103477" } ], "trust": 1.89 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2017-1762", "trust": 2.7 }, { "db": "BID", "id": "103477", "trust": 1.9 }, { "db": "JVNDB", "id": "JVNDB-2018-003087", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201803-899", "trust": 0.6 } ], "sources": [ { "db": "BID", "id": "103477" }, { "db": "JVNDB", "id": "JVNDB-2018-003087" }, { "db": "CNNVD", "id": "CNNVD-201803-899" }, { "db": "NVD", "id": "CVE-2017-1762" } ] }, "id": "VAR-201803-1350", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "VARIoT devices database", "id": null } ], "trust": 0.23809524 }, "last_update_date": "2024-11-23T22:30:29.374000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "2014815", "trust": 0.8, "url": "http://www-01.ibm.com/support/docview.wss?uid=swg22014815" }, { "title": "ibm-jazz-cve20171762-xss (136006)", "trust": 0.8, "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/136006" }, { "title": "IBM Rational Collaborative Lifecycle Management Jazz Foundation Cross-site scripting vulnerability Repair measures", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=79396" } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003087" }, { "db": "CNNVD", "id": "CNNVD-201803-899" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-79", "trust": 1.8 } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003087" }, { "db": "NVD", "id": "CVE-2017-1762" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 1.6, "url": "http://www.ibm.com/support/docview.wss?uid=swg22014815" }, { "trust": 1.6, "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/136006" }, { "trust": 1.6, "url": "http://www.securityfocus.com/bid/103477" }, { "trust": 0.8, "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-1762" }, { "trust": 0.8, "url": "https://nvd.nist.gov/vuln/detail/cve-2017-1762" }, { "trust": 0.3, "url": "http://www.ibm.com" }, { "trust": 0.3, "url": "http://www-01.ibm.com/support/docview.wss?uid=swg22014815" } ], "sources": [ { "db": "BID", "id": "103477" }, { "db": "JVNDB", "id": "JVNDB-2018-003087" }, { "db": "CNNVD", "id": "CNNVD-201803-899" }, { "db": "NVD", "id": "CVE-2017-1762" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "BID", "id": "103477" }, { "db": "JVNDB", "id": "JVNDB-2018-003087" }, { "db": "CNNVD", "id": "CNNVD-201803-899" }, { "db": "NVD", "id": "CVE-2017-1762" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2018-03-20T00:00:00", "db": "BID", "id": "103477" }, { "date": "2018-05-14T00:00:00", "db": "JVNDB", "id": "JVNDB-2018-003087" }, { "date": "2018-03-26T00:00:00", "db": "CNNVD", "id": "CNNVD-201803-899" }, { "date": "2018-03-23T19:29:00.447000", "db": "NVD", "id": "CVE-2017-1762" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2018-03-20T00:00:00", "db": "BID", "id": "103477" }, { "date": "2018-05-14T00:00:00", "db": "JVNDB", "id": "JVNDB-2018-003087" }, { "date": "2019-10-17T00:00:00", "db": "CNNVD", "id": "CNNVD-201803-899" }, { "date": "2024-11-21T03:22:19.840000", "db": "NVD", "id": "CVE-2017-1762" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "CNNVD", "id": "CNNVD-201803-899" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "IBM Jazz Foundation Vulnerable to cross-site scripting", "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003087" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "XSS", "sources": [ { "db": "CNNVD", "id": "CNNVD-201803-899" } ], "trust": 0.6 } }
var-201803-0148
Vulnerability from variot
IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to using a specially crafted URL. IBM X-Force ID: 132625. Vendors have confirmed this vulnerability IBM X-Force ID: 132625 It is released as.Information may be tampered with. Multiple IBM Products are prone to the following multiple security vulnerabilities: 1. An information-disclosure vulnerability 2. Multiple cross-site scripting vulnerability 3. An access-bypass vulnerability An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, gain unauthorized access to the affected application or to obtain sensitive information
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201803-0148", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "rational software architect design manager", "scope": "eq", "trust": 1.9, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 1.9, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 1.9, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 1.6, "vendor": "ibm", "version": "6.0.0" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 1.6, "vendor": "ibm", "version": "5.0.0" }, { "model": "rational team concert", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational team concert", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational quality manager", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational quality manager", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational quality manager", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.0" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational doors next generation", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational doors next generation", "scope": "eq", "trust": 1.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 1.1, "vendor": "ibm", "version": "6.0" }, { "model": "rational engineering lifecycle manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational quality manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0.0" }, { "model": "rational doors next generation", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0.0" }, { "model": "rational team concert", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0.0" }, { "model": "rational engineering lifecycle manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0.0" }, { "model": "rational doors next generation", "scope": "eq", "trust": 1.0, "vendor": "ibm", "version": "5.0.0" }, { "model": "rational software architect design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational doors next generation", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational quality manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational rhapsody design manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 1.0, "vendor": "ibm", "version": "5.0.0" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 1.0, "vendor": "ibm", "version": "5.0.0" }, { "model": "rational rhapsody design manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0.0" }, { "model": "rational collaborative lifecycle management", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational quality manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational doors next generation", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational team concert", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "6.0.0" }, { "model": "rational doors next generation", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational software architect design manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0.0" }, { "model": "rational engineering lifecycle manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational team concert", "scope": "eq", "trust": 1.0, "vendor": "ibm", "version": "5.0.0" }, { "model": "rational rhapsody design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational collaborative lifecycle management", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0.0" }, { "model": "rational engineering lifecycle manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational team concert", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational rhapsody design manager", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational quality manager", "scope": "gte", "trust": 1.0, "vendor": "ibm", "version": "4.0.0" }, { "model": "rational team concert", "scope": "lte", "trust": 1.0, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.9, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.8, "vendor": "ibm", "version": "5.0" }, { "model": "rational doors next generation", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational engineering lifecycle manager", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational quality manager", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational rhapsody design manager", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational software architect design manager", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational team concert", "scope": null, "trust": 0.8, "vendor": "ibm", "version": null }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational team concert", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.0" }, { "model": "rational software architect design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational rhapsody design manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational quality manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational engineering lifecycle manager", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0" }, { "model": "rational doors next generation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.4" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.3" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.1" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.7" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.1" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.7" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "5.0.0" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.6" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.5" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.4" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.3" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.2" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.1" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.0.2" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.0.1" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0.0" }, { "model": "rational collaborative lifecycle management", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "4.0" }, { "model": "jazz team server", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "0" }, { "model": "jazz foundation", "scope": "eq", "trust": 0.3, "vendor": "ibm", "version": "0" }, { "model": "rational team concert ifix3", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational team concert ifix16", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational team concert ifix25", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational quality manager ifix3", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational quality manager ifix16", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational quality manager ifix25", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational doors next generation ifix3", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational doors next generation ifix16", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational doors next generation ifix25", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" }, { "model": "rational collaborative lifecycle management ifix3", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.5" }, { "model": "rational collaborative lifecycle management ifix16", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "6.0.2" }, { "model": "rational collaborative lifecycle management ifix25", "scope": "ne", "trust": 0.3, "vendor": "ibm", "version": "5.0.2" } ], "sources": [ { "db": "BID", "id": "103477" }, { "db": "JVNDB", "id": "JVNDB-2018-003248" }, { "db": "CNNVD", "id": "CNNVD-201803-902" }, { "db": "NVD", "id": "CVE-2017-1602" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "cpe_match": [ { "cpe22Uri": "cpe:/a:ibm:rational_collaborative_lifecycle_management", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_doors_next_generation", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_quality_manager", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_rhapsody_design_manager", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_software_architect_design_manager", "vulnerable": true }, { "cpe22Uri": "cpe:/a:ibm:rational_team_concert", "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003248" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "IBM.", "sources": [ { "db": "BID", "id": "103477" } ], "trust": 0.3 }, "cve": "CVE-2017-1602", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "NONE", "exploitabilityScore": 8.0, "id": "CVE-2017-1602", "impactScore": 2.9, "integrityImpact": "PARTIAL", "severity": "MEDIUM", "trust": 1.8, "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "LOW", "attackVector": "NETWORK", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "exploitabilityScore": 2.8, "id": "CVE-2017-1602", "impactScore": 1.4, "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "trust": 2.8, "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" } ], "severity": [ { "author": "nvd@nist.gov", "id": "CVE-2017-1602", "trust": 1.0, "value": "MEDIUM" }, { "author": "psirt@us.ibm.com", "id": "CVE-2017-1602", "trust": 1.0, "value": "MEDIUM" }, { "author": "NVD", "id": "CVE-2017-1602", "trust": 0.8, "value": "Medium" }, { "author": "CNNVD", "id": "CNNVD-201803-902", "trust": 0.6, "value": "MEDIUM" } ] } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003248" }, { "db": "CNNVD", "id": "CNNVD-201803-902" }, { "db": "NVD", "id": "CVE-2017-1602" }, { "db": "NVD", "id": "CVE-2017-1602" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to using a specially crafted URL. IBM X-Force ID: 132625. Vendors have confirmed this vulnerability IBM X-Force ID: 132625 It is released as.Information may be tampered with. Multiple IBM Products are prone to the following multiple security vulnerabilities:\n1. An information-disclosure vulnerability\n2. Multiple cross-site scripting vulnerability\n3. An access-bypass vulnerability\nAn attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, gain unauthorized access to the affected application or to obtain sensitive information", "sources": [ { "db": "NVD", "id": "CVE-2017-1602" }, { "db": "JVNDB", "id": "JVNDB-2018-003248" }, { "db": "BID", "id": "103477" } ], "trust": 1.89 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2017-1602", "trust": 2.7 }, { "db": "BID", "id": "103477", "trust": 1.9 }, { "db": "JVNDB", "id": "JVNDB-2018-003248", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201803-902", "trust": 0.6 } ], "sources": [ { "db": "BID", "id": "103477" }, { "db": "JVNDB", "id": "JVNDB-2018-003248" }, { "db": "CNNVD", "id": "CNNVD-201803-902" }, { "db": "NVD", "id": "CVE-2017-1602" } ] }, "id": "VAR-201803-0148", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "VARIoT devices database", "id": null } ], "trust": 0.23809524 }, "last_update_date": "2024-11-23T22:30:29.402000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "2014815", "trust": 0.8, "url": "http://www-01.ibm.com/support/docview.wss?uid=swg22014815" }, { "title": "ibm-rsadm-cve20171602-sec-bypass (132625)", "trust": 0.8, "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/132625" }, { "title": "IBM Rational Collaborative Lifecycle Management RSA DM Security vulnerabilities", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=79399" } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003248" }, { "db": "CNNVD", "id": "CNNVD-201803-902" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-552", "trust": 1.0 }, { "problemtype": "CWE-284", "trust": 0.8 } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003248" }, { "db": "NVD", "id": "CVE-2017-1602" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 1.6, "url": "http://www.ibm.com/support/docview.wss?uid=swg22014815" }, { "trust": 1.6, "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/132625" }, { "trust": 1.6, "url": "http://www.securityfocus.com/bid/103477" }, { "trust": 0.8, "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-1602" }, { "trust": 0.8, "url": "https://nvd.nist.gov/vuln/detail/cve-2017-1602" }, { "trust": 0.3, "url": "http://www.ibm.com" }, { "trust": 0.3, "url": "http://www-01.ibm.com/support/docview.wss?uid=swg22014815" } ], "sources": [ { "db": "BID", "id": "103477" }, { "db": "JVNDB", "id": "JVNDB-2018-003248" }, { "db": "CNNVD", "id": "CNNVD-201803-902" }, { "db": "NVD", "id": "CVE-2017-1602" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "BID", "id": "103477" }, { "db": "JVNDB", "id": "JVNDB-2018-003248" }, { "db": "CNNVD", "id": "CNNVD-201803-902" }, { "db": "NVD", "id": "CVE-2017-1602" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2018-03-20T00:00:00", "db": "BID", "id": "103477" }, { "date": "2018-05-18T00:00:00", "db": "JVNDB", "id": "JVNDB-2018-003248" }, { "date": "2018-03-26T00:00:00", "db": "CNNVD", "id": "CNNVD-201803-902" }, { "date": "2018-03-23T19:29:00.277000", "db": "NVD", "id": "CVE-2017-1602" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2018-03-20T00:00:00", "db": "BID", "id": "103477" }, { "date": "2018-05-18T00:00:00", "db": "JVNDB", "id": "JVNDB-2018-003248" }, { "date": "2019-10-17T00:00:00", "db": "CNNVD", "id": "CNNVD-201803-902" }, { "date": "2024-11-21T03:22:07.950000", "db": "NVD", "id": "CVE-2017-1602" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "CNNVD", "id": "CNNVD-201803-902" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "IBM RSA DM Access control vulnerability", "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-003248" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "lack of information", "sources": [ { "db": "CNNVD", "id": "CNNVD-201803-902" } ], "trust": 0.6 } }
cve-2023-45181
Vulnerability from cvelistv5
Vendor | Product | Version | |
---|---|---|---|
▼ | IBM | Jazz Foundation |
Version: 7.0.2 cpe:2.3:a:ibm:jazz_foundation:7.0.2:*:*:*:*:*:*:* |
|
{ "containers": { "adp": [ { "metrics": [ { "other": { "content": { "id": "CVE-2023-45181", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2024-11-25T16:25:11.523902Z", "version": "2.0.3" }, "type": "ssvc" } } ], "providerMetadata": { "dateUpdated": "2024-11-25T16:25:18.650Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" } ], "cna": { "affected": [ { "cpes": [ "cpe:2.3:a:ibm:jazz_foundation:7.0.2:*:*:*:*:*:*:*" ], "defaultStatus": "unaffected", "product": "Jazz Foundation", "vendor": "IBM", "versions": [ { "status": "affected", "version": "7.0.2" } ] } ], "descriptions": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIBM Jazz Foundation 7.0.2 and below are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.\u003c/span\u003e" } ], "value": "IBM Jazz Foundation 7.0.2 and below are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or \u0027Cross-site Scripting\u0027)", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2024-11-25T15:48:46.577Z", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm" }, "references": [ { "url": "https://www.ibm.com/support/pages/node/7176207" } ], "source": { "discovery": "UNKNOWN" }, "title": "IBM Jazz Foundation cross-site scripting", "x_generator": { "engine": "Vulnogram 0.2.0" } } }, "cveMetadata": { "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2023-45181", "datePublished": "2024-11-25T15:48:46.577Z", "dateReserved": "2023-10-05T01:38:58.206Z", "dateUpdated": "2024-11-25T16:25:18.650Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2024-5591
Vulnerability from cvelistv5
Vendor | Product | Version | |
---|---|---|---|
▼ | IBM | Jazz Foundation |
Version: 7.0.2, 7.0.3, 7.1.0 cpe:2.3:a:ibm:jazz_foundation:7.0.2:*:*:*:*:*:*:* cpe:2.3:a:ibm:jazz_foundation:7.0.3:*:*:*:*:*:*:* cpe:2.3:a:ibm:jazz_foundation:7.1.0:*:*:*:*:*:*:* |
|
{ "containers": { "adp": [ { "metrics": [ { "other": { "content": { "id": "CVE-2024-5591", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2025-01-03T17:52:58.978439Z", "version": "2.0.3" }, "type": "ssvc" } } ], "providerMetadata": { "dateUpdated": "2025-01-03T17:53:10.817Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" } ], "cna": { "affected": [ { "cpes": [ "cpe:2.3:a:ibm:jazz_foundation:7.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:jazz_foundation:7.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:jazz_foundation:7.1.0:*:*:*:*:*:*:*" ], "defaultStatus": "unaffected", "product": "Jazz Foundation", "vendor": "IBM", "versions": [ { "status": "affected", "version": "7.0.2, 7.0.3, 7.1.0" } ] } ], "descriptions": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIBM Jazz Foundation 7.0.2, 7.0.3, and 7.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.\u003c/span\u003e" } ], "value": "IBM Jazz Foundation 7.0.2, 7.0.3, and 7.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-209", "description": "CWE-209 Generation of Error Message Containing Sensitive Information", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2025-01-03T14:33:51.872Z", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm" }, "references": [ { "url": "https://www.ibm.com/support/pages/node/7180120" } ], "source": { "discovery": "UNKNOWN" }, "title": "IBM Jazz Foundation information disclosure", "x_generator": { "engine": "Vulnogram 0.2.0" } } }, "cveMetadata": { "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2024-5591", "datePublished": "2025-01-03T14:33:51.872Z", "dateReserved": "2024-06-02T15:43:45.743Z", "dateUpdated": "2025-01-03T17:53:10.817Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2024-41780
Vulnerability from cvelistv5
Vendor | Product | Version | |
---|---|---|---|
▼ | IBM | Jazz Foundation |
Version: 7.0.2, 7.0.3, 7.1.0 cpe:2.3:a:ibm:jazz_foundation:7.0.2:*:*:*:*:*:*:* cpe:2.3:a:ibm:jazz_foundation:7.0.3:*:*:*:*:*:*:* cpe:2.3:a:ibm:jazz_foundation:7.1.0:*:*:*:*:*:*:* |
|
{ "containers": { "adp": [ { "metrics": [ { "other": { "content": { "id": "CVE-2024-41780", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2025-01-03T17:51:46.924230Z", "version": "2.0.3" }, "type": "ssvc" } } ], "providerMetadata": { "dateUpdated": "2025-01-03T17:52:42.605Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" } ], "cna": { "affected": [ { "cpes": [ "cpe:2.3:a:ibm:jazz_foundation:7.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:jazz_foundation:7.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:jazz_foundation:7.1.0:*:*:*:*:*:*:*" ], "defaultStatus": "unaffected", "product": "Jazz Foundation", "vendor": "IBM", "versions": [ { "status": "affected", "version": "7.0.2, 7.0.3, 7.1.0" } ] } ], "descriptions": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIBM Jazz Foundation 7.0.2, 7.0.3, and 7.1.0 could \n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003ecould allow a physical user to obtain sensitive information due to not masking passwords during entry.\u003c/span\u003e\n\n\u003c/span\u003e" } ], "value": "IBM Jazz Foundation 7.0.2, 7.0.3, and 7.1.0 could \n\ncould allow a physical user to obtain sensitive information due to not masking passwords during entry." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "HIGH", "attackVector": "PHYSICAL", "availabilityImpact": "NONE", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-359", "description": "CWE-359 Exposure of Private Information (\u0027Privacy Violation\u0027)", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2025-01-03T14:38:36.851Z", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm" }, "references": [ { "url": "https://www.ibm.com/support/pages/node/7180119" } ], "source": { "discovery": "UNKNOWN" }, "title": "IBM Jazz Foundation information disclosure", "x_generator": { "engine": "Vulnogram 0.2.0" } } }, "cveMetadata": { "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2024-41780", "datePublished": "2025-01-03T14:38:36.851Z", "dateReserved": "2024-07-22T12:03:08.192Z", "dateUpdated": "2025-01-03T17:52:42.605Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2023-26280
Vulnerability from cvelistv5
Vendor | Product | Version | |
---|---|---|---|
▼ | IBM | Jazz Foundation |
Version: 7.0.2, 7.0.3 cpe:2.3:a:ibm:jazz_foundation:7.0.2:*:*:*:*:*:*:* cpe:2.3:a:ibm:jazz_foundation:7.0.3:*:*:*:*:*:*:* |
|
{ "containers": { "adp": [ { "metrics": [ { "other": { "content": { "id": "CVE-2023-26280", "options": [ { "Exploitation": "none" }, { "Automatable": "yes" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2024-11-25T16:24:35.601366Z", "version": "2.0.3" }, "type": "ssvc" } } ], "providerMetadata": { "dateUpdated": "2024-11-25T16:25:00.282Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" } ], "cna": { "affected": [ { "cpes": [ "cpe:2.3:a:ibm:jazz_foundation:7.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:jazz_foundation:7.0.3:*:*:*:*:*:*:*" ], "defaultStatus": "unaffected", "product": "Jazz Foundation", "vendor": "IBM", "versions": [ { "status": "affected", "version": "7.0.2, 7.0.3" } ] } ], "descriptions": [ { "lang": "en", "supportingMedia": [ { "base64": false, "type": "text/html", "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIBM Jazz Foundation 7.0.2 and 7.0.3\u0026nbsp;\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003ecould allow a user to change their dashboard using a specially crafted HTTP request due to improper access control.\u003c/span\u003e\n\n\u003c/span\u003e" } ], "value": "IBM Jazz Foundation 7.0.2 and 7.0.3\u00a0could allow a user to change their dashboard using a specially crafted HTTP request due to improper access control." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-266", "description": "CWE-266 Incorrect Privilege Assignment", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2024-11-25T18:16:42.402Z", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm" }, "references": [ { "url": "https://www.ibm.com/support/pages/node/7176207" } ], "source": { "discovery": "UNKNOWN" }, "title": "IBM Jazz Foundation improper access control", "x_generator": { "engine": "Vulnogram 0.2.0" } } }, "cveMetadata": { "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2023-26280", "datePublished": "2024-11-25T15:51:46.104Z", "dateReserved": "2023-02-21T13:55:50.150Z", "dateUpdated": "2024-11-25T18:16:42.402Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }