CVE:CVE-2020-4445
CNNVD:CNNVD-202009-109
Jazz Team Server是美国IBM公司的一个基于Java的Web应用程序。
IBM Jazz Team Server存在跨站脚本漏洞。该漏洞允许用户在Web UI中嵌入任意JavaScript代码，从而更改预期的功能，导致可信会话中的凭据泄露。
solution:Upgrade ibm doors_next to a higher version than 7.0,and avoid the version 7.0; Upgrade ibm engineering_requirements_management_doors_next to a higher version than 7.0.1,and avoid the version 7.0.1; Upgrade ibm engineering_test_management to a higher version than 7.0.0,and avoid the version 7.0.0; Upgrade ibm engineering_workflow_management to a higher version than 7.0.0,7.0.1,and avoid the version 7.0.0,7.0.1; Upgrade ibm eni to a higher version than 7.0,and avoid the version 7.0; Upgrade ibm rational_collaborative_lifecycle_management to a higher version than 6.0.2,6.0.6,6.0.6.1,and avoid the version 6.0.2,6.0.6,6.0.6.1; Upgrade ibm rational_doors_next_generation to a higher version than 6.0.2,6.0.6,6.0.6.1,and avoid the version 6.0.2,6.0.6,6.0.6.1; Upgrade ibm rational_engineering_lifecycle_manager to a higher version than 6.0.2,6.0.6,6.0.6.1,7.0,and avoid the version 6.0.2,6.0.6,6.0.6.1,7.0; Upgrade ibm rational_quality_manager to a higher version than 6.0.2,6.0.6,6.0.6.1,and avoid the version 6.0.2,6.0.6,6.0.6.1; Upgrade ibm rational_team_concert to a higher version than 6.0.2,6.0.6,6.0.6.1,and avoid the version 6.0.2,6.0.6,6.0.6.1