Code injection

2018-08-1316:29:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.0%

JSON

IBM Rational ClearQuest 8.0 through 8.0.1.9 and 9.0 through 9.0.1.3 (CQ OSLC linkages, EmailRelay) fails to check the SSL certificate against the requested hostname. It is subject to a man-in-the-middle attack with an impersonating server observing all the data transmitted to the real server. IBM X-Force ID: 113353.

CPENameOperatorVersion
rational_clearquestge9.0.1.0
rational_clearquestle9.0.1.3
rational_clearquestge9.0.0.0
rational_clearquestle9.0.0.6
rational_clearquestge8.0.0.0
rational_clearquestle8.0.0.21
rational_clearquestge8.0.1.0
rational_clearquestle8.0.1.17

Name	Operator	Version
rational_clearquest	ge	9.0.1.0
rational_clearquest	le	9.0.1.3
rational_clearquest	ge	9.0.0.0
rational_clearquest	le	9.0.0.6
rational_clearquest	ge	8.0.0.0
rational_clearquest	le	8.0.0.21
rational_clearquest	ge	8.0.1.0
rational_clearquest	le	8.0.1.17