| Package | Affected versions | Patched versions |
|---|---|---|
| rational clearcase | = 7.0.0.1= 7.0.0.2= 7.0.0.4= 7.0.1.1= 7.0.1.3≤ 7.1 | |
| rational clearquest | = 2007= 2008= 5.00= 5.20= 6.00= 6.10= 6.12= 6.13= 6.14= 6.15= 6.16= 7.0= 7.0.0.1= 7.0.1= 7.0.1.0= 7.0.1.1= 7.0.1.3= 7.0.2 |
CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow attackers to discover the passwords for user accounts via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free