Security Bulletin: ClearQuest Phishing Through Frames Vulnerability (CVE-2012-4839)

Summary Security Scanning indicated a vulnerability to a Phishing Through Frames attack in the OSLC system in IBM Rational ClearQuest. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires...

CVE-2012-4839

The OSLC interface in IBM Rational ClearQuest Web (CQ Web) is affected by CVE-2012-4839. Affected: ClearQuest Web server 7.1.2.0–7.1.2.8 and 8.0.0.0–8.0.0.4. Root cause: OSLC dialog/frame handling allows phishing attacks via a FRAME element. CVSS base score 4.3 (MEDIUM). Remediation: upgrade to 7...