CVE-2014-3106

Currently unrated

Key Information:

Vendor
IBM
Vendor
CVE Published:
23 September 2014

Summary

IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not properly implement the Local Access Only protection mechanism, which allows remote attackers to bypass authentication and read files via the Help Server Administration feature.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.