CVE:CVE-2018-1558
CNNVD:CNNVD-201809-1311
IBM Rational Collaborative Lifecycle Management（CLM）等都是美国IBM公司的产品。IBM Rational Collaborative Lifecycle Management是一套协作化生命周期管理解决方案。Rational Quality Manager（RQM）是一套协作的、基于Web的质量管理解决方案。IBM Rhapsody Model Manager是一套协作设计模型管理软件。该软件支持使用中央系统存储库存储、共享、搜索和管理设计模型以及软件自动化的设计评审等。
IBM Rhapsody Model Manager中存在跨站脚本漏洞。远程攻击者可利用该漏洞在Web UI中注入任意JavaScript代码。以下产品和版本受到影响：IBM Rational Collaborative Lifecycle Management 5.0版本至6.0.6版本；Rational Quality Manager 5.0版本至5.0.2版本，6.0版本至6.0.6版本；Rational Team Concert 5.0版本至5.0.2版本，6.0版本至6.0.6版本；Rational DOORS Next Generation 5.0版本至5.0.2，6.0版本至6.0.6版本；Rational Engineering Lifecycle Manager 5.0版本至5.0.2版本，6.0版本至6.0.6版本；Rational Rhapsody Design Manager 5.0版本至5.0.2版本，6.0版本至6.0.6版本；Rational Software Architect Design Manager 5.0版本至5.0.2版本，6.0版本至6.0.1版本。
solution:Upgrade ibm rational_collaborative_lifecycle_management to a higher version than 6.0.6,and avoid the version [5.0,6.0.6]; Upgrade ibm rational_doors_next_generation to a higher version than 5.0.2,6.0.6,and avoid the version [5.0,5.0.2],[6.0.0,6.0.6]; Upgrade ibm rational_engineering_lifecycle_manager to a higher version than 5.0.2,6.0.6,and avoid the version [5.0,5.0.2],[6.0,6.0.6]; Upgrade ibm rational_quality_manager to a higher version than 5.0.2,6.0.6,and avoid the version [5.0,5.0.2],[6.0,6.0.6]; Upgrade ibm rational_rhapsody_design_manager to a higher version than 5.0.2,6.0.6,and avoid the version [5.0,5.0.2],[6.0,6.0.6]; Upgrade ibm rational_software_architect_design_manager to a higher version than 5.0.2,6.0.1,and avoid the version [5.0,5.0.2],[6.0,6.0.1]; Upgrade ibm rational_team_concert to a higher version than 5.0.2,6.0.6,and avoid the version [5.0,5.0.2],[6.0,6.0.6]