CVE-2012-4839

2012-12-2012:02:17

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.3

Confidence

Low

EPSS

0.002

Percentile

61.1%

JSON

The OSLC interface in the Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to conduct phishing attacks via a FRAME element.

Affected configurations

Nvd

Node

ibmrational_clearquestMatch7.1.2

ibmrational_clearquestMatch7.1.2.1

ibmrational_clearquestMatch7.1.2.2

ibmrational_clearquestMatch7.1.2.3

ibmrational_clearquestMatch7.1.2.4

ibmrational_clearquestMatch7.1.2.5

ibmrational_clearquestMatch7.1.2.6

ibmrational_clearquestMatch7.1.2.7

ibmrational_clearquestMatch7.1.2.8

Node

ibmrational_clearquestMatch8.0.0

ibmrational_clearquestMatch8.0.0.1

ibmrational_clearquestMatch8.0.0.2

ibmrational_clearquestMatch8.0.0.3

ibmrational_clearquestMatch8.0.0.4

VendorProductVersionCPE
ibmrational_clearquest7.1.2cpe:2.3:a:ibm:rational_clearquest:7.1.2:*:*:*:*:*:*:*
ibmrational_clearquest7.1.2.1cpe:2.3:a:ibm:rational_clearquest:7.1.2.1:*:*:*:*:*:*:*
ibmrational_clearquest7.1.2.2cpe:2.3:a:ibm:rational_clearquest:7.1.2.2:*:*:*:*:*:*:*
ibmrational_clearquest7.1.2.3cpe:2.3:a:ibm:rational_clearquest:7.1.2.3:*:*:*:*:*:*:*
ibmrational_clearquest7.1.2.4cpe:2.3:a:ibm:rational_clearquest:7.1.2.4:*:*:*:*:*:*:*
ibmrational_clearquest7.1.2.5cpe:2.3:a:ibm:rational_clearquest:7.1.2.5:*:*:*:*:*:*:*
ibmrational_clearquest7.1.2.6cpe:2.3:a:ibm:rational_clearquest:7.1.2.6:*:*:*:*:*:*:*
ibmrational_clearquest7.1.2.7cpe:2.3:a:ibm:rational_clearquest:7.1.2.7:*:*:*:*:*:*:*
ibmrational_clearquest7.1.2.8cpe:2.3:a:ibm:rational_clearquest:7.1.2.8:*:*:*:*:*:*:*
ibmrational_clearquest8.0.0cpe:2.3:a:ibm:rational_clearquest:8.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	rational_clearquest	7.1.2	cpe:2.3:a:ibm:rational_clearquest:7.1.2:::::::*
ibm	rational_clearquest	7.1.2.1	cpe:2.3:a:ibm:rational_clearquest:7.1.2.1:::::::*
ibm	rational_clearquest	7.1.2.2	cpe:2.3:a:ibm:rational_clearquest:7.1.2.2:::::::*
ibm	rational_clearquest	7.1.2.3	cpe:2.3:a:ibm:rational_clearquest:7.1.2.3:::::::*
ibm	rational_clearquest	7.1.2.4	cpe:2.3:a:ibm:rational_clearquest:7.1.2.4:::::::*
ibm	rational_clearquest	7.1.2.5	cpe:2.3:a:ibm:rational_clearquest:7.1.2.5:::::::*
ibm	rational_clearquest	7.1.2.6	cpe:2.3:a:ibm:rational_clearquest:7.1.2.6:::::::*
ibm	rational_clearquest	7.1.2.7	cpe:2.3:a:ibm:rational_clearquest:7.1.2.7:::::::*
ibm	rational_clearquest	7.1.2.8	cpe:2.3:a:ibm:rational_clearquest:7.1.2.8:::::::*
ibm	rational_clearquest	8.0.0	cpe:2.3:a:ibm:rational_clearquest:8.0.0:::::::*