CVE-2014-3106

IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not properly implement the Local Access Only protection mechanism, which allows remote attackers to bypass authentication and read files via the Help Server Administration feature.

Score

CVSS 2.0 5.0 Medium

Status

Modified - psirt@us.ibm.com

Published

2014-09-23

Last modified

2024-08-06

Weaknesses

CWE-287

Affected products

• Rational Clearcase (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21682950
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94313