Skip to content
OpenAdvisories
Unscored CVE-2010-4602 EUVD-2010-4568GHSA-7mr5-jw74-mxgh

The Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1 allows remote authenticated users to bypass "re…

Published Dec 29, 2010 · Updated Aug 7, 2024 · Assigned by mitre

Description

The Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1 allows remote authenticated users to bypass "restricted user" limitations, and read arbitrary records, via a modified record number in the URL for a RECORD action, as demonstrated by a modified bookmark.

References