Lucene search

K
cve[email protected]CVE-2012-5765
HistoryDec 20, 2012 - 12:02 p.m.

CVE-2012-5765

2012-12-2012:02:19
CWE-200
web.nvd.nist.gov
19
ibm
rational clearquest
web client
sql error
security vulnerability
cve-2012-5765
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.5 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.1%

The Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a SQL error message.

Affected configurations

NVD
Node
ibmrational_clearquestMatch7.1.2
OR
ibmrational_clearquestMatch7.1.2.1
OR
ibmrational_clearquestMatch7.1.2.2
OR
ibmrational_clearquestMatch7.1.2.3
OR
ibmrational_clearquestMatch7.1.2.4
OR
ibmrational_clearquestMatch7.1.2.5
OR
ibmrational_clearquestMatch7.1.2.6
OR
ibmrational_clearquestMatch7.1.2.7
OR
ibmrational_clearquestMatch7.1.2.8
Node
ibmrational_clearquestMatch8.0.0
OR
ibmrational_clearquestMatch8.0.0.1
OR
ibmrational_clearquestMatch8.0.0.2
OR
ibmrational_clearquestMatch8.0.0.3
OR
ibmrational_clearquestMatch8.0.0.4

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.5 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.1%

Related for CVE-2012-5765