KLA10497 Security bypass vulnerability in IBM Rational ClearQuest

Cross site reference forgery was found in IBM Rational ClearQuest. By exploiting this vulnerability malicious users can bypass security restrictions. This vulnerability can be exploited remotely via a auth hijack.

Original advisories

Related products

IBM-Rational-ClearQuest

CVE list

CVE-2014-8925 high

Solution

Update to latest version!

Impacts

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• IBM Rational ClearQuest 7.1 versions earlier than 7.1.2.17IBM Rational ClearQuest 8.0 versions earlier than 8.0.0.14IBM Rational ClearQuest 8.0.1. versions earlier than 8.0.1.7