Information Disclosure in IBM Rational ClearQuest by IBM

CVE-2012-0744

Summary

Certain versions of IBM Rational ClearQuest, including 7.1.x through 7.1.2.7 and 8.x through 8.0.0.3, exhibit a vulnerability that permits unauthorized remote attackers to access potentially sensitive information. This is achieved through crafted requests to specific sample scripts, such as snoop, hello, and j_security_check, which may inadvertently reveal sensitive details. Users of the affected products are advised to review security measures and consider patching to mitigate the risks associated with this vulnerability.

References