A vulnerability has been reported in IBM Rational Team Concert, which can be exploited by malicious users to conduct script insertion attacks.

Input passed via report names is not properly sanitised before being displayed to the user. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site when the malicious data is being viewed.

Solution
Apply APAR PM22477.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
IBM (PM22477):
http://www.ibm.com/support/docview.wss?uid=swg1PM22477

Deep Links
Links available to Secunia VIM customers