CVE-2018-1658

Severity: medium (CVSS 5.4 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-03-14 · updated 2026-06-17
Weakness: CWE-20

Description

IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to HTTP header injection, caused by improper validation of input. By persuading a victim to visit a specially-crafted Web page, a remote attacker could exploit this vulnerability to inject arbitrary HTTP headers, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 144884.

Affected products

IBM Rational Collaborative Lifecycle Management: from 5.0 through 6.0.6

References

http://www.ibm.com/support/docview.wss?uid=ibm10875340
http://www.securityfocus.com/bid/107435
https://exchange.xforce.ibmcloud.com/vulnerabilities/144884
http://www.ibm.com/support/docview.wss?uid=ibm10875340
http://www.securityfocus.com/bid/107435
https://exchange.xforce.ibmcloud.com/vulnerabilities/144884

Get alerted when CVE-2018-1658 or the next vulnerability affects your stack