IBM Rational DOORS Web Access CVE-2018-1975 Cross Site Scripting Vulnerability
BID:108408
Info
IBM Rational DOORS Web Access CVE-2018-1975 Cross Site Scripting Vulnerability
| Bugtraq ID: | 108408 |
| Class: | Input Validation Error |
| CVE: |
CVE-2018-1975 |
| Remote: | Yes |
| Local: | No |
| Published: | May 10 2019 12:00AM |
| Updated: | May 10 2019 12:00AM |
| Credit: | IBM |
| Vulnerable: |
IBM Rational DOORS Web Access 9.6.1 IBM Rational DOORS Web Access 9.6 1 IBM Rational DOORS Web Access 9.6 IBM Rational DOORS Web Access 9.5.2 1 IBM Rational DOORS Web Access 9.5.2 IBM Rational DOORS Web Access 9.5.1 1 IBM Rational DOORS Web Access 9.5.1 IBM Rational DOORS Web Access 9.6.1.9 IBM Rational DOORS Web Access 9.6.1.8 IBM Rational DOORS Web Access 9.6.1.5 IBM Rational DOORS Web Access 9.6.1.4 IBM Rational DOORS Web Access 9.6.1.3 IBM Rational DOORS Web Access 9.6.1.2 IBM Rational DOORS Web Access 9.6.1.11 IBM Rational DOORS Web Access 9.6.1.10 IBM Rational DOORS Web Access 9.6.1.1 IBM Rational DOORS Web Access 9.6.0.8 IBM Rational DOORS Web Access 9.6.0.7 IBM Rational DOORS Web Access 9.6.0.6 IBM Rational DOORS Web Access 9.6.0.4 IBM Rational DOORS Web Access 9.6 IBM Rational DOORS Web Access 9.5.2.9 IBM Rational DOORS Web Access 9.5.2.8 IBM Rational DOORS Web Access 9.5.2.7 IBM Rational DOORS Web Access 9.5.2.4 IBM Rational DOORS Web Access 9.5.1.9 IBM Rational DOORS Web Access 9.5.1.8 IBM Rational DOORS Web Access 9.5.1.5 IBM Rational DOORS Web Access 9.5.1.2 IBM Rational DOORS Web Access 9.5.1.10 |
| Not Vulnerable: |
IBM Rational DOORS Web Access 9.6.1.12 IBM Rational DOORS Web Access 9.6.0.9 IBM Rational DOORS Web Access 9.5.2.10 IBM Rational DOORS Web Access 9.5.1.11 |
Discussion
IBM Rational DOORS Web Access CVE-2018-1975 Cross Site Scripting Vulnerability
IBM Rational DOORS Web Access is prone to a cross-site scripting vulnerability.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
The following versions of Rational DOORS Web Access are vulnerable:
9.5.1 through 9.5.1.10
9.5.2 through 9.5.2.9
9.6.0 through 9.6.0.8
9.6.1 through 9.6.1.11
IBM Rational DOORS Web Access is prone to a cross-site scripting vulnerability.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
The following versions of Rational DOORS Web Access are vulnerable:
9.5.1 through 9.5.1.10
9.5.2 through 9.5.2.9
9.6.0 through 9.6.0.8
9.6.1 through 9.6.1.11
Exploit / POC
IBM Rational DOORS Web Access CVE-2018-1975 Cross Site Scripting Vulnerability
To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.
To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.
Solution / Fix
IBM Rational DOORS Web Access CVE-2018-1975 Cross Site Scripting Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
IBM Rational DOORS Web Access CVE-2018-1975 Cross Site Scripting Vulnerability
References:
References: