4.9
CVSSv2

CVE-2018-1549

Published: 10/07/2018 Updated: 24/08/2020
CVSS v2 Base Score: 4.9 | Impact Score: 4.9 | Exploitability Score: 6.8
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 436
Vector: AV:N/AC:M/Au:S/C:P/I:P/A:N

Vulnerability Summary

IBM Rational Quality Manager 5.0 up to and including 5.0.2 and 6.0 up to and including 6.0.5 are vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the malicious user to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 142658.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ibm rational quality manager