IBM Security Bulletin: Vulnerability in Rational Team Concert with potential for Cross-Site Scripting attack (CVE-2016-0331)
IBM Team Concert (RTC) is vulnerable to cross-site scripting, caused by improper validation of user-supplied input.
CVE(s): CVE-2016-0331
Affected product(s) and affected version(s):
Rational Collaborative Lifecycle Management 6.0.1 – 6.0.2
Rational Team Concert 6.0.1 – 6.0.2
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2c4AFB7
X-Force Database: http://ift.tt/2chyGMX
from IBM Product Security Incident Response Team http://ift.tt/2c4CcqM