PT-2013-4099

Name of the Vulnerable Software and Affected Versions IBM Rational Focal Point versions 6.5.x through 6.6.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified...

CVE-2013-3025

Multiple cross-site scripting XSS vulnerabilities in IBM Rational Focal Point 6.5.x and 6.6.x before 6.6.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-3025: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM Rational Focal Point 6.5.x and 6.6.x before 6.6.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-3041

The Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to obtain sensitive information from the client-server data stream via unspecified vectors associated with a "JSON hijacking attack."...

Information disclosure

The Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to obtain sensitive information from the client-server data stream via unspecified vectors associated with a "JSON hijacking attack."...

CVE-2013-3041

IBM Rational ClearQuest Web Client contains a JSON Hijacking vulnerability (CVE-2013-3041) that could allow remote attackers to disclose sensitive information from the client–server data stream. Affected are ClearQuest Web: 7.1.x before 7.1.2.12, 8.0.x before 8.0.0.8, and 8.0.1.x before 8.0.1.1. ...

PT-2013-4115

Name of the Vulnerable Software and Affected Versions IBM Rational ClearQuest versions 7.1 through 7.1.2.12 IBM Rational ClearQuest versions 8.0 through 8.0.0.8 IBM Rational ClearQuest versions 8.0.1 through 8.0.1.1 Description The issue allows remote attackers to obtain sensitive information fro...

CVE-2013-3041

The Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to obtain sensitive information from the client-server data stream via unspecified vectors associated with a "JSON hijacking attack."...

CVE-2013-3041: Undefined Security Weakness

The Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to obtain sensitive information from the client-server data stream via unspecified vectors associated with a "JSON hijacking attack."...

CVE-2013-0598

Cross-site request forgery CSRF vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2013-0598

Cross-site request forgery CSRF vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2013-0598

IBM Rational ClearQuest Web Client is affected by a CSRF vulnerability (CVE-2013-0598) in versions 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1, which could allow remote attackers to hijack a user’s authenticated session. The issue is documented by an IBM Security Bulletin an...

PT-2013-2452

Name of the Vulnerable Software and Affected Versions IBM Rational ClearQuest versions 7.1 through 7.1.2.12 IBM Rational ClearQuest versions 8.0 through 8.0.0.8 IBM Rational ClearQuest versions 8.0.1 through 8.0.1.1 Description A cross-site request forgery CSRF issue exists, allowing remote...

CVE-2013-0598: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2013-5373

The RemoteClient component in IBM Rational ClearCase 8.0.0.03 through 8.0.0.07, and 8.0.1, uses world-writable permissions for the rcleartool script, which allows local users to gain privileges by appending commands...

Command injection

The RemoteClient component in IBM Rational ClearCase 8.0.0.03 through 8.0.0.07, and 8.0.1, uses world-writable permissions for the rcleartool script, which allows local users to gain privileges by appending commands...

CVE-2013-5373

The RemoteClient component in IBM Rational ClearCase 8.0.0.03 through 8.0.0.07, and 8.0.1, uses world-writable permissions for the rcleartool script, which allows local users to gain privileges by appending commands...

CVE-2013-5373

This CVE affects IBM Rational ClearCase RemoteClient: the rcleartool script and its config file have world-writable permissions, enabling local users to insert commands and potentially escalate privileges. Affected versions are Rational ClearCase 8.0.0.3–8.0.0.7 and 8.0.1. If exploited, the attac...

PT-2013-5499

Name of the Vulnerable Software and Affected Versions IBM Rational ClearCase versions 8.0.0.03 through 8.0.0.07 IBM Rational ClearCase version 8.0.1 Description The issue concerns the RemoteClient component, which uses world-writable permissions for the rcleartool script. This allows local users ...