CVE-2016-2922

CVE-2016-2922 affects IBM Rational ClearQuest (CQ OSLC linkages, EmailRelay) where the SSL certificate is not validated against the requested hostname, enabling MITM with spoofed servers. Affected versions: 8.0.x (8.0 through 8.0.0.21 and 8.0.1 through 8.0.1.17) and 9.x (9.0 through 9.0.1.3). Imp...

Security Bulletin: A security vulnerability in IBM Rational ClearQuest with SSL/TLS communications (CVE-2016-2922)

Summary IBM Rational ClearQuest is vulnerable to attacks on its SSL/TLS communications due to improper validation of server certificates. Vulnerability Details CVEID: CVE-2016-2922 DESCRIPTION: IBM ClearQuest CQ OSLC linkages, EmailRelay fails to check the SSL certificate against the requested...