CVE-2011-3391

CVE-2011-3391 affects IBM Rational Build Forge 7.1.2. The flaw arises from relying on client-side JavaScript to enforce the EditSecurity permission for the Export Key File function. This allows remote authenticated users to read a key file by removing the disabled attribute in the Security submen...

CVE-2011-3391: Undefined Security Weakness

IBM Rational Build Forge 7.1.2 relies on client-side JavaScript code to enforce the EditSecurity permission requirement for the Export Key File function, which allows remote authenticated users to read a key file by removing a disable attribute in the Security sub-menu...

CVE-2011-2679

Cross-site scripting XSS vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2682

The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service license consumption by trying to login to DOORS Web Access with a new user account that has never been used for a DOORS login...

CVE-2011-2681

IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not properly handle exceptions, which has unspecified impact and remote attack vectors...

CVE-2011-2680

Unspecified vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 has unknown impact and remote attack vectors related to the "server error response."...

Code injection

Unspecified vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 has unknown impact and remote attack vectors related to the "server error response."...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not properly handle exceptions, which has unspecified impact and remote attack vectors...

Code injection

The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service license consumption by trying to login to DOORS Web Access with a new user account that has never been used for a DOORS login...

CVE-2011-2680

Unspecified vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 has unknown impact and remote attack vectors related to the "server error response."...

CVE-2011-2679

Cross-site scripting XSS vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2679

CVE-2011-2679 describes a cross-site scripting (XSS) flaw in IBM Rational DOORS Web Access 1.4.x prior to 1.4.0.4. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, implying user-interaction or trust boundaries could be leveraged to execute ...

CVE-2011-2682

The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service license consumption by trying to login to DOORS Web Access with a new user account that has never been used for a DOORS login...

CVE-2011-2682

CVE-2011-2682 : The Login component in IBM Rational DOORS Web Access 1.4.x prior to 1.4.0.4 allows remote authenticated users to cause a denial of service via license consumption by logging with a new user account that has never been used to log in before. This is a confirmed issue with affected ...

CVE-2011-2681

IBM Rational DOORS Web Access 1.4.x prior to 1.4.0.4 is affected by an issue where exceptions are not handled properly, described as having unspecified impact and remote attack vectors. The root cause is improper exception handling in the affected component. Remediation is to upgrade to 1.4.0.4 o...

CVE-2011-2681

IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not properly handle exceptions, which has unspecified impact and remote attack vectors...

CVE-2011-2680

CVE-2011-2680 affects IBM Rational DOORS Web Access 1.4.x before 1.4.0.4. The description is explicit that impact is unknown and that there are remote attack vectors related to the server error response. The NVD entry assigns a high base score (10.0) with network attack vector, no authentication,...

CVE-2011-2679: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2682: Undefined Security Weakness

The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service license consumption by trying to login to DOORS Web Access with a new user account that has never been used for a DOORS login...