IBM Rational ClearQuest Back Reference Field Security Vulnerability

Bugtraq ID:	45648
Class:	Unknown
CVE:	CVE-2010-4603
Remote:	Yes
Local:	No
Published:	Jan 03 2011 12:00AM
Updated:	Jan 03 2011 12:00AM
Credit:	IBM
Vulnerable:	IBM Rational ClearQuest 7.1.1 02 IBM Rational ClearQuest 7.1.1 IBM Rational ClearQuest 7.1 2 IBM Rational ClearQuest 7.0.1 3 IBM Rational ClearQuest 7.0.1 .1 IBM Rational ClearQuest 7.0.1 IBM Rational ClearQuest 7.0 4 IBM Rational ClearQuest 7.0 .2 IBM Rational ClearQuest 7.0 .1 IBM Rational ClearQuest 7.1.2 IBM Rational ClearQuest 7.1 IBM Rational ClearQuest 7.0.1.5 IBM Rational ClearQuest 7.0.1.4 IBM Rational ClearQuest 7.0.0.6 IBM Rational ClearQuest 7.0.0.5 IBM Rational ClearQuest 7.0 IBM Rational ClearQuest
Not Vulnerable:	IBM Rational ClearQuest 7.1.2.1 IBM Rational ClearQuest 7.1.1.4 IBM Rational ClearQuest 7.0.1.11

IBM Rational ClearQuest Back Reference Field Security Vulnerability

IBM Rational ClearQuest is prone to a security vulnerability related to back reference field modification.

Attackers can leverage this issue to impact the integrity of intended record relationships or potentially trigger a denial-of-service condition through an infinite loop.

Versions prior to IBM Rational ClearQuest 7.0.1.11, 7.1.1.4, and 7.1.2.1 are vulnerable.

IBM Rational ClearQuest Back Reference Field Security Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Rational ClearQuest Back Reference Field Security Vulnerability

Solution:
Updates are available; please see the references for more information.

IBM Rational ClearQuest Back Reference Field Security Vulnerability

References:

• Rational ClearQuest Homepage (IBM)
  
• PM22186: THE CQ CORE SHOULD BE ABLE TO DETECT WHEN A REMOVE IS TAKING PLACE ON A (IBM)