CVE-2014-8925

Currently unrated

Key Information:

Vendor
IBM
Status
Rational Clearquest
Vendor
CVE Published:
25 March 2015

Summary

Cross-site request forgery (CSRF) vulnerability in ClearQuest Web in IBM Rational ClearQuest 7.1.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a logout or insert XSS sequences.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21699148
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.