ibm rational clearquest 7.1.2.10 vulnerabilities and exploits

(subscribe to this query)

Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1 prior to 7.1.2.12, 8.0 prior to 8.0.0.8, and 8.0.1 prior to 8.0.1.1 allows remote malicious users to hijack the authentication of arbitrary users.

The Web Client in IBM Rational ClearQuest 7.1 prior to 7.1.2.12, 8.0 prior to 8.0.0.8, and 8.0.1 prior to 8.0.1.1 allows remote malicious users to obtain sensitive information from the client-server data stream via unspecified vectors associated with a "JSON hijacking attack...

Cross-site scripting (XSS) vulnerability in the Web Client in IBM Rational ClearQuest 7.1.x prior to 7.1.2.10 and 8.x prior to 8.0.0.6 allows remote malicious users to inject arbitrary web script or HTML via a crafted URL.

Cross-site request forgery (CSRF) vulnerability in ClearQuest Web in IBM Rational ClearQuest 7.1.x prior to 7.1.2.17, 8.0.0.x prior to 8.0.0.14, and 8.0.1.x prior to 8.0.1.7 allows remote malicious users to hijack the authentication of arbitrary users for requests that trigger a ...

IBM Rational ClearQuest 7.1.x and 8.0.0.x prior to 8.0.0.17 and 8.0.1.x prior to 8.0.1.10 allows local users to spoof database servers and discover credentials via unspecified vectors.

The Web Client in IBM Rational ClearQuest 7.1 up to and including 7.1.2.12, 8.0.0.x prior to 8.0.0.9, and 8.0.1.x prior to 8.0.1.2, when a multi-database dataset exists, allows remote malicious users to read database names via unspecified vectors.

IBM Rational ClearQuest 7.1 prior to 7.1.2.15, 8.0.0 prior to 8.0.0.12, and 8.0.1 prior to 8.0.1.5 does not properly implement the Local Access Only protection mechanism, which allows remote malicious users to bypass authentication and read files via the Help Server Administratio...

IBM Rational ClearQuest 7.1 prior to 7.1.2.15, 8.0.0 prior to 8.0.0.12, and 8.0.1 prior to 8.0.1.5 allows remote malicious users to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to ...

The login form in the Web component in IBM Rational ClearQuest 7.1 prior to 7.1.2.15, 8.0.0 prior to 8.0.0.12, and 8.0.1 prior to 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote malicious users to obtain access via a brute-f...

The OSLC integration feature in the Web component in IBM Rational ClearQuest 7.1 prior to 7.1.2.15, 8.0.0 prior to 8.0.0.12, and 8.0.1 prior to 8.0.1.5 provides different error messages for failed login attempts depending on whether the username exists, which allows remote malici...

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook