Vulnerability Description
IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not properly implement the Local Access Only protection mechanism, which allows remote attackers to bypass authentication and read files via the Help Server Administration feature.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Rational Clearcase | 7.1 |
Related Weaknesses (CWE)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21682950PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94313
- http://www-01.ibm.com/support/docview.wss?uid=swg21682950PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94313
FAQ
What is CVE-2014-3106?
CVE-2014-3106 is a vulnerability with a CVSS score of 5.0 (MEDIUM). IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not properly implement the Local Access Only protection mechanism, which allows remote attackers to by...
How severe is CVE-2014-3106?
CVE-2014-3106 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-3106?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Rational Clearcase.