Description
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133261.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Rational Quality Manager | 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5 | — |
| IBM | Rational Collaborative Lifecycle Management | 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE OpenStack Cloud 7 | rubygem-yajl-ruby | 1.3.1-4.3.2 | SUSE-RU-2017:3408-1 |
| SUSE OpenStack Cloud 6 | rubygem-yajl-ruby | 1.3.1-4.3.2 | SUSE-RU-2017:3408-1 |
| SUSE Enterprise Storage 4 | rubygem-yajl-ruby | 1.3.1-4.3.2 | SUSE-RU-2017:3408-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Enterprise Storage 3 | rubygem-yajl-ruby | 1.3.1-4.3.2 | SUSE-RU-2017:3408-1 |
Advisories 1
- SUSE-RU-2017:3408-1 Recommended update for rubygem-yajl-ruby SUSE / openSUSE Security Updates · Feb 4, 2026