IBM Rational Team Concert CVE-2015-0122 Unspecified HTML Injection Vulnerability
BID:73093
Info
IBM Rational Team Concert CVE-2015-0122 Unspecified HTML Injection Vulnerability
| Bugtraq ID: | 73093 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-0122 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 05 2015 12:00AM |
| Updated: | Mar 05 2015 12:00AM |
| Credit: | IBM |
| Vulnerable: |
IBM Rational Team Concert 5.0.1 IBM Rational Team Concert 4.0.5 IBM Rational Team Concert 4.0.4 IBM Rational Team Concert 4.0.3 IBM Rational Team Concert 4.0.2 IBM Rational Team Concert 4.0.1 IBM Rational Team Concert 3.0.1 6 IBM Rational Team Concert 3.0.1 .2 IBM Rational Team Concert 2.0 2 IBM Rational Team Concert 2.0 1 IBM Rational Team Concert 5.0 IBM Rational Team Concert 4.0.7 IBM Rational Team Concert 4.0.6 IBM Rational Team Concert 4.0.0.2 IBM Rational Team Concert 4.0.0.1 IBM Rational Team Concert 4.0 IBM Rational Team Concert 3.0.1.5 IBM Rational Team Concert 3.0.1.4 IBM Rational Team Concert 3.0.1.3 IBM Rational Team Concert 3.0.1.1 IBM Rational Team Concert 3.0.1 IBM Rational Team Concert 3.0 IBM Rational Team Concert 2.0 |
| Not Vulnerable: |
IBM Rational Team Concert 5.0.2 IBM Rational Team Concert 4.0.7 iFix3 IBM Rational Team Concert 3.0.1.6 iFix5 |
Discussion
IBM Rational Team Concert CVE-2015-0122 Unspecified HTML Injection Vulnerability
IBM Rational Team Concert is prone to an unspecified HTMl-injection vulnerability.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
IBM Rational Team Concert is prone to an unspecified HTMl-injection vulnerability.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Exploit / POC
IBM Rational Team Concert CVE-2015-0122 Unspecified HTML Injection Vulnerability
An attacker can exploit this issue using a web browser.
An attacker can exploit this issue using a web browser.
Solution / Fix
IBM Rational Team Concert CVE-2015-0122 Unspecified HTML Injection Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
IBM Rational Team Concert CVE-2015-0122 Unspecified HTML Injection Vulnerability
References:
References: