IBM Security Bulletin: Cross-site scripting vulnerabilities affect IBM® Rational® Team Concert

IBM Team Concert (RTC) is vulnerable to multiple cross-site scripting vulnerabilities.

CVE(s): CVE-2016-9701, CVE-2016-9746, CVE-2016-9733, CVE-2017-1113

Affected product(s) and affected version(s):

Rational Collaborative Lifecycle Management 4.0 – 6.0.3

Rational Team Concert 4.0 – 4.0.7
Rational Team Concert 5.0 – 5.0.2
Rational Team Concert 6.0 – 6.0.3

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2tc5dsE
X-Force Database: http://ift.tt/2ss2rm2
X-Force Database: http://ift.tt/2tc5dZG
X-Force Database: http://ift.tt/2ssy66I
X-Force Database: http://ift.tt/2tc5f3K

The post IBM Security Bulletin: Cross-site scripting vulnerabilities affect IBM® Rational® Team Concert appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2ssyAtA