CVE-2012-2164

Опубликовано: 17 авг. 2012

Источник: nvd

CVSS2: 5.5

EPSS Низкий

Описание

The Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to bypass intended access restrictions, and use the Site Administration menu to modify system settings, via a parameter-tampering attack.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg1PM62735
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21606318
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/75039
http://www-01.ibm.com/support/docview.wss?uid=swg1PM62735
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21606318
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/75039

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:rational_clearquest:7.1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.1.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.1.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.1.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.1.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.1.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.2.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.2.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.2.6:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:ibm:rational_clearquest:8.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:8.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:8.0.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 36%

0.00154

Низкий

5.5 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-4jv2-g4w2-66wc

github

больше 3 лет назад