Skip to content
OpenAdvisories
Unscored CVE-2011-3391 EUVD-2011-3354GHSA-mqv6-xxj9-p7wp

IBM Rational Build Forge 7.1.2 relies on client-side JavaScript code to enforce the EditSecurity permission requirement for the Export Key …

Published Sep 8, 2011 · Updated Aug 6, 2024 · Assigned by mitre

Description

IBM Rational Build Forge 7.1.2 relies on client-side JavaScript code to enforce the EditSecurity permission requirement for the Export Key File function, which allows remote authenticated users to read a key file by removing a disable attribute in the Security sub-menu.

References