IBM Rational ClearQuest 7.1.1.x < 7.1.1.4 / 7.1.2.x < 7.1.2.1 Multiple Vulnerabilities (credentialed check)

The remote host is running a version of IBM Rational ClearQuest 7.1.1.x prior to 7.1.1.4 / 7.1.2.x prior to 7.1.2.1 installed. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability exists in the Dojo Toolkit that allows a remote attacker to read...

CVE-2010-4603

IBM Rational ClearQuest is affected by CVE-2010-4603: specific releases (7.0.x before 7.0.1.11; 7.1.1.x before 7.1.1.4; 7.1.2.x before 7.1.2.1) do not prevent modification of back-reference fields. This allows remote authenticated users to interfere with intended record relationships by adding or...