CVE-2012-2164

Published: Aug 17, 2012Modified: Apr 29, 2026

5.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Exploitability: 8.0 / Impact: 4.9

Source: NVD

Description

The Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to bypass intended access restrictions, and use the Site Administration menu to modify system settings, via a parameter-tampering attack.

Affected (18)

Products: Ibm: Rational Clearquest

Ibm

1 product

Rational Clearquest

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Clearquest	Version 7.1.1.1
Ibm Rational Clearquest	Version 7.1.1.2
Ibm Rational Clearquest	Version 7.1.1.3
Ibm Rational Clearquest	Version 7.1.1.4
Ibm Rational Clearquest	Version 7.1.1.5
Ibm Rational Clearquest	Version 7.1.1.6
Ibm Rational Clearquest	Version 7.1.1.7
Ibm Rational Clearquest	Version 7.1.1.8
Ibm Rational Clearquest	Version 7.1.2.1
Ibm Rational Clearquest	Version 7.1.2.2
Ibm Rational Clearquest	Version 7.1.2.3
Ibm Rational Clearquest	Version 7.1.2.4
Ibm Rational Clearquest	Version 7.1.2.5
Ibm Rational Clearquest	Version 7.1.2.6
Ibm Rational Clearquest	Version 7.1.2