Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2013-0598

IBM Rational ClearQuest Web Client is affected by a CSRF vulnerability (CVE-2013-0598) in versions 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1, which could allow remote attackers to hijack a user’s authenticated session. The issue is documented by an IBM Security Bulletin an...

CVE-2013-0598

Cross-site request forgery CSRF vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the authentication of arbitrary users...

IBM Rational ClearQuest Multiple Information Disclosure Vulnerabilities

This host is installed with IBM Rational ClearQuest and is prone to multiple information disclosure vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmrationalclearquestmultinfodiscvuln.nasl 6093 2017-05-10 09:03:18Z teissa $ IBM Rational ClearQuest Multiple Information Disclosure...

IBM Rational ClearQuest Multiple Information Disclosure Vulnerabilities

IBM Rational ClearQuest is prone to multiple information disclosure vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

IBM Rational ClearQuest 7.1.x < 7.1.2.10 / 8.0.0.x < 8.0.0.6 Web Client Unspecified XSS (credentialed check)

The remote host has a version of IBM Rational ClearQuest 7.1.x prior to 7.1.2.10 / 8.0.0.x prior to 8.0.0.6 installed. It is, therefore, potentially affected by an unspecified cross-site scripting vulnerability related to the 'Web client' component. Note that only hosts with the server component...

CVE-2012-5757

Cross-site scripting XSS vulnerability in the Web Client in IBM Rational ClearQuest 7.1.x before 7.1.2.10 and 8.x before 8.0.0.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web Client in IBM Rational ClearQuest 7.1.x before 7.1.2.10 and 8.x before 8.0.0.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2012-5757

CVE-2012-5757 concerns a Cross-Site Scripting (XSS) vulnerability in the IBM Rational ClearQuest Web Client . The issue affects ClearQuest Web Clients before version 7.1.2.10 and before version 8.0.0.6 . The root cause is an XSS flaw that allows remote attackers to inject arbitrary web script or ...

CVE-2012-5757

Cross-site scripting XSS vulnerability in the Web Client in IBM Rational ClearQuest 7.1.x before 7.1.2.10 and 8.x before 8.0.0.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

IBM Rational ClearQuest 7.1.x < 7.1.2.9 / 8.0.0.x < 8.0.0.5 Multiple Vulnerabilities (credentialed check)

The remote host has a version of IBM Rational ClearQuest 7.1.x prior to 7.1.2.9 / 8.0.0.x prior to 8.0.0.5 installed. It is, therefore, affected by the following vulnerabilities : - An unspecified input validation error exists related to the Open Services for Lifecycle Collaboration OSLC system...

CVE-2012-5765

The Web Client aka CQ Web in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a SQL error message...

CVE-2012-4839

The OSLC interface in the Web Client aka CQ Web in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to conduct phishing attacks via a FRAME element...

Design/Logic Flaw

The OSLC interface in the Web Client aka CQ Web in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to conduct phishing attacks via a FRAME element...

Information disclosure

The Web Client aka CQ Web in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a SQL error message...

CVE-2012-4839

The OSLC interface in the Web Client aka CQ Web in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to conduct phishing attacks via a FRAME element...

CVE-2012-5765

The Web Client aka CQ Web in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a SQL error message...

CVE-2012-5765

IBM Rational ClearQuest Web (CQ Web) is affected in 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5. The vulnerability allows remote attackers to disclose sensitive information via SQL error messages (SQL Error Message Attack). Affected component is the ClearQuest Web client; desktop/CLI is not...

CVE-2012-4839

The OSLC interface in IBM Rational ClearQuest Web (CQ Web) is affected by CVE-2012-4839. Affected: ClearQuest Web server 7.1.2.0–7.1.2.8 and 8.0.0.0–8.0.0.4. Root cause: OSLC dialog/frame handling allows phishing attacks via a FRAME element. CVSS base score 4.3 (MEDIUM). Remediation: upgrade to 7...

IBM Rational ClearQuest 7.1.x < 7.1.2.8 / 8.0.0.x < 8.0.0.4 GSKit Spoofing (credentialed check)

The remote host has a version of IBM Rational ClearQuest 7.1.x prior to 7.1.2.8 / 8.0.0.x prior to 8.0.0.4 installed. It is, therefore, affected by a spoofing vulnerability related to the included Global Security Kit GSKit and certificate objects. The GSKit does not enforce file integrity of the...