IBM Rational ClearQuest Web Client CVE-2013-5422 Unspecified Information Disclosure Vulnerability

Bugtraq ID:	64340
Class:	Design Error
CVE:	CVE-2013-5422
Remote:	Yes
Local:	No
Published:	Dec 13 2013 12:00AM
Updated:	Dec 13 2013 12:00AM
Credit:	IBM
Vulnerable:	IBM Rational ClearQuest 8.0.1 IBM Rational ClearQuest 7.1.1 8 IBM Rational ClearQuest 7.1.1 3 IBM Rational ClearQuest 7.1.1 2 IBM Rational ClearQuest 7.1.1 1 IBM Rational ClearQuest 7.1.1 IBM Rational ClearQuest 8.0.1.1 IBM Rational ClearQuest 8.0.0.8 IBM Rational ClearQuest 8.0.0.7 IBM Rational ClearQuest 8.0.0.5 IBM Rational ClearQuest 8.0.0.4 IBM Rational ClearQuest 8.0.0.3 IBM Rational ClearQuest 8.0.0.2 IBM Rational ClearQuest 8.0.0.1 IBM Rational ClearQuest 8.0 IBM Rational ClearQuest 7.1.2.9 IBM Rational ClearQuest 7.1.2.8 IBM Rational ClearQuest 7.1.2.7 IBM Rational ClearQuest 7.1.2.6 IBM Rational ClearQuest 7.1.2.5 IBM Rational ClearQuest 7.1.2.4 IBM Rational ClearQuest 7.1.2.3 IBM Rational ClearQuest 7.1.2.2 IBM Rational ClearQuest 7.1.2.12 IBM Rational ClearQuest 7.1.2.10 IBM Rational ClearQuest 7.1.2.1 IBM Rational ClearQuest 7.1.2 IBM Rational ClearQuest 7.1.1.9 IBM Rational ClearQuest 7.1.1.7 IBM Rational ClearQuest 7.1.1.6 IBM Rational ClearQuest 7.1.1.5 IBM Rational ClearQuest 7.1.1.4 IBM Rational ClearQuest 7.1.1.3 IBM Rational ClearQuest 7.1.1.2 IBM Rational ClearQuest 7.1.1.1 IBM Rational ClearQuest 7.1.0.2 IBM Rational ClearQuest 7.1.0.1 IBM Rational ClearQuest 7.1
Not Vulnerable:

IBM Rational ClearQuest Web Client CVE-2013-5422 Unspecified Information Disclosure Vulnerability

IBM Rational ClearQuest is prone to an unspecified information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.

The following versions are affected:

IBM Rational ClearQuest 7.1 through 7.1.2.12
IBM Rational ClearQuest 8.0 through 8.0.0.8
IBM Rational ClearQuest 8.0.1 and 8.0.1.1

IBM Rational ClearQuest Web Client CVE-2013-5422 Unspecified Information Disclosure Vulnerability

An attacker can exploit this issue using a web browser.

IBM Rational ClearQuest Web Client CVE-2013-5422 Unspecified Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Rational ClearQuest Web Client CVE-2013-5422 Unspecified Information Disclosure Vulnerability

References:

• IBM Homepage (IBM)
  
• IBM Rational Requirements Composer Homepage (IBM)
  
• Security Bulletin: Vulnerability in IBM Rational ClearQuest Web Client with pote (IBM)