CVE:CVE-2014-3037
CNNVD:CNNVD-201409-443
IBM Rational Engineering Lifecycle Manager、Rational Software Architect（RSA）Design Manager和Rational Rhapsody Design Manager都是美国IBM公司的产品。IBM Rational Engineering Lifecycle Manager是一套工程生命周期管理软件；RSA Design Manager是一套基于Jazz技术的协作式软件设计和开发平台；Rational Rhapsody Design Manager是一款通过中心设计存储库对设计和模型进行存储、共享、搜索和管理的软件。 
多款IBM产品中的IBM Configuration Management Application存在跨站请求伪造漏洞。远程攻击者可利用该漏洞插入XSS序列。以下产品和版本受到影响：IBM Rational Engineering Lifecycle Manager 4.0.6及之前版本和5.0版本，Rational Software Architect Design Manager 4.0.6及之前版本和5.版本，Rational Rhapsody Design Manager 4.0.6及之前版本和5.0版本。
solution:Upgrade ibm rational_rhapsody_design_manager to a higher version than 4.0.6,3.0,3.0.0.1,3.0.1,4.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,5.0,and avoid the version (,4.0.6],3.0,3.0.0.1,3.0.1,4.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,5.0; Upgrade ibm rational_engineering_lifecycle_manager to a higher version than 4.06,1.0,1.0.0.1,4.03,4.04,4.05,5.0,and avoid the version (,4.06],1.0,1.0.0.1,4.03,4.04,4.05,5.0; Upgrade ibm rational_software_architect_design_manager to a higher version than 4.0.6,3.0,3.0.0.1,4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,5.0,and avoid the version (,4.0.6],3.0,3.0.0.1,4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,5.0