CVE-2012-2168

IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to obtain sensitive stack-trace information from CM server error messages via an invalid parameter.

Score

CVSS 2.0 4.0 Medium

Status

Modified - psirt@us.ibm.com

Published

2012-08-17

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Rational Clearquest (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1PM61822
• http://www.ibm.com/support/docview.wss?uid=swg21606319
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75048