ibm rational clearcase 7.1.2.14 vulnerabilities and exploits

(subscribe to this query)

The MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x prior to 7.1.2.17, 8.0.0.x prior to 8.0.0.14, and 8.0.1.x prior to 8.0.1.7 does not properly generate random numbers, which makes it easier for remote malicious users to defeat cryptographic prot...

IBM Rational ClearCase 7.1 prior to 7.1.2.15, 8.0.0 prior to 8.0.0.12, and 8.0.1 prior to 8.0.1.5 allows remote malicious users to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to C...

The login form in the Web component in IBM Rational ClearQuest 7.1 prior to 7.1.2.15, 8.0.0 prior to 8.0.0.12, and 8.0.1 prior to 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote malicious users to obtain access via a brute-f...

The Web component in IBM Rational ClearQuest 7.1 prior to 7.1.2.15, 8.0.0 prior to 8.0.0.12, and 8.0.1 prior to 8.0.1.5 does not set the secure flag for the session cookie in an https session, which makes it easier for remote malicious users to capture this cookie by intercepting...

IBM Rational ClearQuest 7.1 prior to 7.1.2.15, 8.0.0 prior to 8.0.0.12, and 8.0.1 prior to 8.0.1.5 allows remote malicious users to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to ...

The OSLC integration feature in the Web component in IBM Rational ClearQuest 7.1 prior to 7.1.2.15, 8.0.0 prior to 8.0.0.12, and 8.0.1 prior to 8.0.1.5 provides different error messages for failed login attempts depending on whether the username exists, which allows remote malici...

IBM Rational ClearQuest 7.1 prior to 7.1.2.15, 8.0.0 prior to 8.0.0.12, and 8.0.1 prior to 8.0.1.5 does not properly implement the Local Access Only protection mechanism, which allows remote malicious users to bypass authentication and read files via the Help Server Administratio...

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook