VULNERABILITY INTELLIGENCE

CVE-2018-1549

CVSS score5.4 MEDIUM

EPSS probability0.93%

CISA KEVNot currently listed

Published2018-07-10

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 142658.

Weakness classification

CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Primary references

psirt@us.ibm.com — Patch, Vendor Advisory
psirt@us.ibm.com — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry