IBM Rational Quality Manager and Test Lab Manager Remote Code Execution Vulnerability
BID:44172
Info
IBM Rational Quality Manager and Test Lab Manager Remote Code Execution Vulnerability
| Bugtraq ID: | 44172 |
| Class: | Design Error |
| CVE: |
CVE-2010-4094 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 18 2010 12:00AM |
| Updated: | Apr 13 2015 09:02PM |
| Credit: | AbdulAziz Hariri |
| Vulnerable: |
IBM Rational Quality Manager 0 |
| Not Vulnerable: |
IBM Rational Quality Manager 7.9.0.3 build 1046 |
Discussion
IBM Rational Quality Manager and Test Lab Manager Remote Code Execution Vulnerability
IBM Rational Quality Manager and Test Lab Manager is prone to a remote code-execution vulnerability.
An attacker can exploit this issue to execute arbitrary code within context of the Tomcat webserver.
Versions prior to IBM Rational Quality Manager and Test Lab Manager 7.9.0.3 build: 1046.
IBM Rational Quality Manager and Test Lab Manager is prone to a remote code-execution vulnerability.
An attacker can exploit this issue to execute arbitrary code within context of the Tomcat webserver.
Versions prior to IBM Rational Quality Manager and Test Lab Manager 7.9.0.3 build: 1046.
Exploit / POC
IBM Rational Quality Manager and Test Lab Manager Remote Code Execution Vulnerability
An attacker can exploit this issue through a browser.
An attacker can exploit this issue through a browser.
Solution / Fix
IBM Rational Quality Manager and Test Lab Manager Remote Code Execution Vulnerability
Solution:
The vendor released updates to address this issue. Please see the references for more information.
Solution:
The vendor released updates to address this issue. Please see the references for more information.