IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not properly implement the Local Access Only protection mechanism, which allows remote attackers to bypass authentication and read files via the Help Server Administration feature.
References
Link | Resource |
---|---|
http://www-01.ibm.com/support/docview.wss?uid=swg21682950 | Patch Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/94313 | |
http://www-01.ibm.com/support/docview.wss?uid=swg21682950 | Patch Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/94313 |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:07
Type | Values Removed | Values Added |
---|---|---|
References | () http://www-01.ibm.com/support/docview.wss?uid=swg21682950 - Patch, Vendor Advisory | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/94313 - |
Information
Published : 2014-09-23 21:55
Updated : 2024-11-21 02:07
NVD link : CVE-2014-3106
Mitre link : CVE-2014-3106
CVE.ORG link : CVE-2014-3106
JSON object : View
Products Affected
ibm
- rational_clearcase
CWE
CWE-287
Improper Authentication