Code injection

2011-09-0818:55:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.4%

JSON

IBM Rational Build Forge 7.1.2 relies on client-side JavaScript code to enforce the EditSecurity permission requirement for the Export Key File function, which allows remote authenticated users to read a key file by removing a disable attribute in the Security sub-menu.

CPENameOperatorVersion
rational_build_forgeeq7.1.2

CPE	Name	Operator	Version
	rational_build_forge	eq	7.1.2

References

secunia.com/advisories/45871

securitytracker.com/id?1026004

www.ibm.com/support/docview.wss?uid=swg1PM38058

www.osvdb.org/74831

www.securityfocus.com/bid/49407

exchange.xforce.ibmcloud.com/vulnerabilities/69522