IBM Security Bulletin: Vulnerability in Rational DOORS Next Generation with potential for Javascript Injection Attack (CVE-2017-1305)

An undisclosed security vulnerability in IBM Rational DOORS Next Generation may allow a JavaScript Injection attack

CVE(s): CVE-2017-1305

Affected product(s) and affected version(s):

Rational DOORS Next Generation 6.0.2 – 6.0.3

Versions prior to 6.0.2 are not vulnerable to this CVE vulnerability.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2qL07Sn
X-Force Database: http://ift.tt/2s48lJe

The post IBM Security Bulletin: Vulnerability in Rational DOORS Next Generation with potential for Javascript Injection Attack (CVE-2017-1305) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2qLlGlw