IBM Security Bulletin: Rational Software Architect Design Manager is vulnerable to cross-site scripting (CVE-2018-1400)

Jul 23, 2018 9:00 am EDT

Categorized: Medium Severity

Share this post:

RSA DM allowed injection of arbitrary JavaScript code into configuration names, which could later get executed during some configuration management operations.

CVE(s): CVE-2018-1400

Affected product(s) and affected version(s):

IBM Rational Software Architect Design Manager 4.0.0 – 4.0.7
IBM Rational Software Architect Design Manager 5.0.0 – 5.0.2
IBM Rational Software Architect Design Manager 6.0.0 – 6.0.2

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=ibm10717617
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/138436

from IBM Product Security Incident Response Team https://ift.tt/2Lhhtoe