CVE-2010-4600

Dojo Toolkit, as used in the Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1, allows remote attackers to read cookies by navigating to a Dojo file, related to an "open direct" issue.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2010-12-29

Last modified

2024-09-16

Weaknesses

CWE-200

Affected products

• Dojo Toolkit (Dojofoundation)
• Rational Clearquest (Ibm)

References

• http://secunia.com/advisories/42624
• http://www-01.ibm.com/support/docview.wss?uid=swg1PM15146