CVE-2012-2169

Cross-site scripting XSS vulnerability in the file-upload functionality in the Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 allows remote authenticated users to inject arbitrary web script or HTML via the File Description field...

CVE-2012-2205

Cross-site scripting XSS vulnerability in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to inject arbitrary web script or HTML via a workspace query...

CVE-2012-2168

IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to obtain sensitive stack-trace information from CM server error messages via an invalid parameter...

CVE-2012-2165

IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3, when ClearQuest Authentication is enabled, allows remote authenticated users to read password hashes via a user query...

CVE-2012-0744

IBM Rational ClearQuest 7.1.x through 7.1.2.7 and 8.x through 8.0.0.3 allows remote attackers to obtain potentially sensitive information via a request to a 1 snoop, 2 hello, 3 ivt/, 4 hitcount, 5 HitCount.jsp, 6 HelloHTMLError.jsp, 7 HelloHTML.jsp, 8 HelloVXMLError.jsp, 9 HelloVXML.jsp, 10...

Cross site scripting

Cross-site scripting XSS vulnerability in the file-upload functionality in the Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 allows remote authenticated users to inject arbitrary web script or HTML via the File Description field...

Information disclosure

IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to obtain sensitive stack-trace information from CM server error messages via an invalid parameter...

Authentication flaw

IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3, when ClearQuest Authentication is enabled, allows remote authenticated users to read password hashes via a user query...

Design/Logic Flaw

The Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to bypass intended access restrictions, and use the Site Administration menu to modify system settings, via a parameter-tampering attack...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to inject arbitrary web script or HTML via a workspace query...

CVE-2012-2168

IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to obtain sensitive stack-trace information from CM server error messages via an invalid parameter...

CVE-2012-2205

Cross-site scripting XSS vulnerability in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to inject arbitrary web script or HTML via a workspace query...

CVE-2012-2168

IBM Rational ClearQuest Web versions prior to 7.1.2.7 and 8.0.0.3 are affected by CVE-2012-2168, which allows remote authenticated users to obtain sensitive stack-trace information from CM server error messages via an invalid parameter. The issue is a information disclosure in ClearQuest Web erro...

CVE-2012-2205

Summary: CVE-2012-2205 is a Cross-Site Scripting (XSS) vulnerability in the IBM Rational ClearQuest Web client. The issue affects ClearQuest Web clients prior to version 7.1.2.7 and 8.0.0.3. Impact / root cause: remote authenticated users can inject arbitrary web script or HTML via a workspace qu...

CVE-2012-2164

The CVE-2012-2164 entry affects IBM Rational ClearQuest Web. The Web client on ClearQuest versions 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to bypass intended access restrictions and use the Site Administration menu to modify system settings via a parameter-ta...

CVE-2012-2169

CVE-2012-2169 affects the IBM Rational ClearQuest Web client. The vulnerability is a Cross-Site Scripting (XSS) flaw in the file-upload functionality where the File Description field can be abused to inject arbitrary web script or HTML. Affected product: ClearQuest Web Client prior to version 7.1...

CVE-2012-2165

CVE-2012-2165 affects IBM Rational ClearQuest 7.x before 7.1.2.7 and 8.x before 8.0.0.3. When ClearQuest Authentication is enabled, remote authenticated users can read password hashes via a user query, an information-disclosure flaw. The IBM bulletin confirms this as a vulnerability in the ClearQ...

CVE-2012-0744

IBM Rational ClearQuest 7.1.x through 7.1.2.7 and 8.x through 8.0.0.3 allows remote attackers to obtain potentially sensitive information via a request to a 1 snoop, 2 hello, 3 ivt/, 4 hitcount, 5 HitCount.jsp, 6 HelloHTMLError.jsp, 7 HelloHTML.jsp, 8 HelloVXMLError.jsp, 9 HelloVXML.jsp, 10...

CVE-2012-2169

Cross-site scripting XSS vulnerability in the file-upload functionality in the Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 allows remote authenticated users to inject arbitrary web script or HTML via the File Description field...

CVE-2012-0744

The CVE-2012-0744 entry is supported by IBM’s Security Bulletin for ClearQuest Web leftovers: the ClearQuest Web deployment into WebSphere includes sample/debug scripts that are unnecessary and may disclose information, potentially aiding an attacker. Affected products/versions: IBM Rational Clea...