Authentication flaw

2014-09-2321:55:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.7%

JSON

IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not properly implement the Local Access Only protection mechanism, which allows remote attackers to bypass authentication and read files via the Help Server Administration feature.

CPENameOperatorVersion
rational_clearcaseeq7.1.2.12
rational_clearcaseeq8.0.0.10
rational_clearcaseeq7.1.1.8
rational_clearcaseeq7.1.2.10
rational_clearcaseeq8.0.0.11
rational_clearcaseeq8.0.1.4
rational_clearcaseeq8.0.1.2
rational_clearcaseeq7.1.1.3
rational_clearcaseeq7.1.2
rational_clearcaseeq8.0.0.1

Name	Operator	Version
rational_clearcase	eq	7.1.2.12
rational_clearcase	eq	8.0.0.10
rational_clearcase	eq	7.1.1.8
rational_clearcase	eq	7.1.2.10
rational_clearcase	eq	8.0.0.11
rational_clearcase	eq	8.0.1.4
rational_clearcase	eq	8.0.1.2
rational_clearcase	eq	7.1.1.3
rational_clearcase	eq	7.1.2
rational_clearcase	eq	8.0.0.1