Vulnerability Bulletins

IBM Security Bulletin: Vulnerability in Rational Team Concert with potential for Cross-Site Scripting attack (CVE-2016-0331)

   
Affected software IBM
 
IBM Team Concert (RTC) is vulnerable to cross-site scripting, caused by improper validation of user-supplied input.CVE(s): CVE-2016-0331Affected product(s) and affected version(s):Rational Collaborative Lifecycle Management 6.0.1 – 6.0.2 Rational Team Concert 6.0.1 – 6.0.2Refer to the following reference URLs for remediation and additional vulnerability details:Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg21989899X-Force Database:

More info:

https://www.ibm.com/blogs/psirt/ibm-security-bulletin-vulnerability-in-rational-team-concert-with-potential-for-cross-site-scripting-attack-cve-2016-0331/