CVE-2010-4600: Infoleak
Published Dec 29, 2010
·Updated
Dojo Toolkit, as used in the Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1, allows remote attackers to read cookies by navigating to a Dojo file, related to an "open direct" issue.
Affected Software
5 affected components
Dojofoundation Dojo Toolkit
IBM Rational ClearQuest=7.1.1.1
IBM Rational ClearQuest=7.1.1.2
IBM Rational ClearQuest=7.1.1.3
IBM Rational ClearQuest=7.1.2
Event History
Dec 29, 2010
CVE Published
via MITRE·05:27 PM
Data Sourced
via MITRE·05:27 PM
Description
Data Sourced
06:00 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-4600?
CVE-2010-4600 is considered a moderate severity vulnerability due to its potential to expose sensitive cookie information.
2
How do I fix CVE-2010-4600?
To fix CVE-2010-4600, upgrade IBM Rational ClearQuest to version 7.1.1.4 or 7.1.2.1 or later.
3
Who is affected by CVE-2010-4600?
Users of IBM Rational ClearQuest versions 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1 are affected by CVE-2010-4600.
4
What kind of attacks can exploit CVE-2010-4600?
CVE-2010-4600 can be exploited by remote attackers to read user cookies through the Dojo Toolkit.
5
When was CVE-2010-4600 published?
CVE-2010-4600 was published in December 2010.