| Package | Affected versions | Patched versions |
|---|---|---|
| rational clearcase | = 7.1= 7.1.0.1= 7.1.0.2= 7.1.1= 7.1.1.1= 7.1.1.2= 7.1.1.3= 7.1.1.4= 7.1.1.5= 7.1.1.6= 7.1.1.7= 7.1.1.8= 7.1.1.9= 7.1.2= 7.1.2.1= 7.1.2.10= 7.1.2.11= 7.1.2.12= 7.1.2.13= 7.1.2.14= 7.1.2.2= 7.1.2.3= 7.1.2.4= 7.1.2.5= 7.1.2.6= 7.1.2.7= 7.1.2.9= 8.0= 8.0.0.1= 8.0.0.10= 8.0.0.11= 8.0.0.2= 8.0.0.3= 8.0.0.4= 8.0.0.5= 8.0.0.6= 8.0.0.7= 8.0.0.8= 8.0.0.9= 8.0.1= 8.0.1.1= 8.0.1.2= 8.0.1.3= 8.0.1.4 |
IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not properly implement the Local Access Only protection mechanism, which allows remote attackers to bypass authentication and read files via the Help Server Administration feature.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free