CVE-2013-0598

Cross-site request forgery CSRF vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2013-5373

The RemoteClient component in IBM Rational ClearCase 8.0.0.03 through 8.0.0.07, and 8.0.1, uses world-writable permissions for the rcleartool script, which allows local users to gain privileges by appending commands...

Command injection

The RemoteClient component in IBM Rational ClearCase 8.0.0.03 through 8.0.0.07, and 8.0.1, uses world-writable permissions for the rcleartool script, which allows local users to gain privileges by appending commands...

CVE-2013-5373

The RemoteClient component in IBM Rational ClearCase 8.0.0.03 through 8.0.0.07, and 8.0.1, uses world-writable permissions for the rcleartool script, which allows local users to gain privileges by appending commands...

CVE-2013-5373

This CVE affects IBM Rational ClearCase RemoteClient: the rcleartool script and its config file have world-writable permissions, enabling local users to insert commands and potentially escalate privileges. Affected versions are Rational ClearCase 8.0.0.3–8.0.0.7 and 8.0.1. If exploited, the attac...

CVE-2013-3039

IBM Rational Requirements Composer before 4.0.4 does not properly perform authentication, which has unspecified impact and remote attack vectors...

CVE-2013-3038

Unspecified vulnerability in IBM Rational Requirements Composer before 4.0.4 makes it easier for remote attackers to discover credentials via unknown vectors...

CVE-2013-3036

Open redirect vulnerability in IBM Rational Requirements Composer before 4.0.4 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL...

CVE-2013-3037

Unspecified vulnerability in IBM Rational Requirements Composer before 4.0.4 makes it easier for local users to gain privileges via unknown vectors...

Code injection

Unspecified vulnerability in IBM Rational Requirements Composer before 4.0.4 makes it easier for local users to gain privileges via unknown vectors...

CVE-2013-3038

Unspecified vulnerability in IBM Rational Requirements Composer before 4.0.4 makes it easier for remote attackers to discover credentials via unknown vectors...

CVE-2013-3039

IBM Rational Requirements Composer before 4.0.4 does not properly perform authentication, which has unspecified impact and remote attack vectors...

CVE-2013-3037

Unspecified vulnerability in IBM Rational Requirements Composer before 4.0.4 makes it easier for local users to gain privileges via unknown vectors...

CVE-2013-3036

Open redirect vulnerability in IBM Rational Requirements Composer before 4.0.4 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL...

CVE-2013-3036

IBM Rational Requirements Composer prior to 4.0.4 is affected by an open redirect vulnerability. Remote authenticated users can construct a URL that redirects victims to arbitrary external sites, enabling phishing via crafted links. Documents consistently describe the issue as an open redirect wi...

CVE-2013-3037

CVE-2013-3037 affects IBM Rational Requirements Composer prior to 4.0.4. The vulnerability is described as an unspecified local-privilege-escalation, enabling local users to gain privileges via unknown vectors. The connected documents confirm the vendor/product and version, but do not provide con...

CVE-2013-3038

CVE-2013-3038 affects IBM Rational Requirements Composer prior to 4.0.4. The vulnerability is described as an unspecified issue that makes it easier for remote attackers to discover credentials via unknown vectors. The available connected sources list this product/version but do not provide concr...

CVE-2013-3039

The vulnerability CVE-2013-3039 affects IBM Rational Requirements Composer before 4.0.4. The root cause is improper authentication, leading to an unspecified impact with remote attack vectors. Documents consolidate the issue but do not specify vulnerable components beyond the product/version, nor...

CVE-2013-4062

IBM Rational Policy Tester 8.5 before 8.5.0.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof Jazz Team servers, obtain sensitive information, and modify the client-server data stream via a crafted certificate...

CVE-2013-4061

IBM Rational Policy Tester 8.5 before 8.5.0.5 does not properly check authorization for changes to the set of authentication hosts, which allows remote authenticated users to perform spoofing attacks involving an HTTP redirect via unspecified vectors...