CVE-2018-1549
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 142658.
IBM Rational Quality Manager, de la versión 5.0 a la 5.0.2 y desde la versión 6.0 hasta la 6.0.5, es vulnerable a ataques de separación de respuesta HTTP. Un atacante remoto podría explotar esta vulnerabilidad utilizando una URL especialmente manipulada para provocar que el servidor devuelva una respuesta dividida una vez que se pincha en la URL. Esto permitiría que el atacante realice más ataques como el envenenamiento de la memoria caché web, Cross-Site Scripting (XSS) y posiblemente la obtención de información sensible. IBM X-Force ID: 142658.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2017-12-13 CVE Reserved
- 2018-07-10 CVE Published
- 2024-05-15 EPSS Updated
- 2024-09-17 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CAPEC
References (2)
URL | Tag | Source |
---|---|---|
https://exchange.xforce.ibmcloud.com/vulnerabilities/142658 | Third Party Advisory |
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
http://www.ibm.com/support/docview.wss?uid=ibm10716607 | 2020-08-24 |
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Ibm Search vendor "Ibm" | Rational Quality Manager Search vendor "Ibm" for product "Rational Quality Manager" | >= 5.0 <= 5.0.2 Search vendor "Ibm" for product "Rational Quality Manager" and version " >= 5.0 <= 5.0.2" | - |
Affected
| ||||||
Ibm Search vendor "Ibm" | Rational Quality Manager Search vendor "Ibm" for product "Rational Quality Manager" | >= 6.0 <= 6.0.5 Search vendor "Ibm" for product "Rational Quality Manager" and version " >= 6.0 <= 6.0.5" | - |
Affected
|