CVE-2010-4603
Description
IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.2.x before 7.1.2.1 does not prevent modification of back-reference fields, which allows remote authenticated users to interfere with intended record relationships, and possibly cause a denial of service (loop) or have unspecified other impact, by (1) adding or (2) removing a back reference.
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.
✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| ibm | rational_clearquest | 7.0 | |
| ibm | rational_clearquest | 7.0.0.0 | |
| ibm | rational_clearquest | 7.0.0.1 | |
| ibm | rational_clearquest | 7.0.0.2 | |
| ibm | rational_clearquest | 7.0.0.3 | |
| ibm | rational_clearquest | 7.0.0.4 | |
| ibm | rational_clearquest | 7.0.0.5 | |
| ibm | rational_clearquest | 7.0.0.6 | |
| ibm | rational_clearquest | 7.0.0.7 | |
| ibm | rational_clearquest | 7.0.0.8 | |
| ibm | rational_clearquest | 7.0.0.9 | |
| ibm | rational_clearquest | 7.0.1 | |
| ibm | rational_clearquest | 7.0.1.0 | |
| ibm | rational_clearquest | 7.0.1.1 | |
| ibm | rational_clearquest | 7.0.1.2 | |
| ibm | rational_clearquest | 7.0.1.3 | |
| ibm | rational_clearquest | 7.0.1.4 | |
| ibm | rational_clearquest | 7.0.1.5 | |
| ibm | rational_clearquest | 7.0.1.6 | |
| ibm | rational_clearquest | 7.0.1.7 | |
| ibm | rational_clearquest | 7.0.1.8 | |
| ibm | rational_clearquest | 7.0.1.9 | |
| ibm | rational_clearquest | 7.0.1.10 | |
| ibm | rational_clearquest | 7.1.1.1 | |
| ibm | rational_clearquest | 7.1.1.2 | |
| ibm | rational_clearquest | 7.1.1.3 | |
| ibm | rational_clearquest | 7.1.2 | |
References
- ftp://public.dhe.ibm.com/software/rational/clearquest/7.1.1/7.1.1.4-RATL-RCQ/7.1.1.4-RATL-RCQ.ux.readme
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM22186
- http://www-01.ibm.com/support/docview.wss?uid=swg21125139
- http://www.securityfocus.com/bid/45648
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64439
- ftp://public.dhe.ibm.com/software/rational/clearquest/7.1.1/7.1.1.4-RATL-RCQ/7.1.1.4-RATL-RCQ.ux.readme
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM22186
- http://www-01.ibm.com/support/docview.wss?uid=swg21125139
- http://www.securityfocus.com/bid/45648
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64439
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.