| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| rational collaborative lifecycle management | ≥ 4.0.0, ≤ 6.0.4 | |
| rational doors next generation | ≥ 4.0.1, ≤ 4.0.7≥ 5.0.0, ≤ 5.0.2≥ 6.0.0, ≤ 6.0.4 | |
| rational engineering lifecycle manager | ≥ 4.0.3, ≤ 4.0.7≥ 5.0.0, ≤ 5.0.2≥ 6.0.0, ≤ 6.0.4 | |
| rational quality manager | ≥ 4.0.0, ≤ 4.0.7≥ 5.0.0, ≤ 5.0.2≥ 6.0.0, ≤ 6.0.4 | |
| rational rhapsody design manager | ≥ 4.0.0, ≤ 4.0.7≥ 5.0.0, ≤ 5.0.2≥ 6.0.0, ≤ 6.0.4 | |
| rational software architect design manager | = 5.0.0= 5.0.1= 5.0.2= 6.0.0= 6.0.1≥ 4.0.0, ≤ 4.0.7 | |
| rational team concert | ≥ 4.0.0, ≤ 4.0.7≥ 5.0.0, ≤ 5.0.2≥ 6.0.0, ≤ 6.0.4 |
IBM Team Concert (RTC including IBM Rational Collaborative Lifecycle Management 4.0, 5.0., and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID: 126858.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン