CVE-2012-2168: Infoleak
Published Aug 17, 2012
·Updated
IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to obtain sensitive stack-trace information from CM server error messages via an invalid parameter.
Affected Software
18 affected components
IBM Rational ClearQuest=7.1.1.1
IBM Rational ClearQuest=7.1.1.2
IBM Rational ClearQuest=7.1.1.3
IBM Rational ClearQuest=7.1.1.4
IBM Rational ClearQuest=7.1.1.5
IBM Rational ClearQuest=7.1.1.6
IBM Rational ClearQuest=7.1.1.7
IBM Rational ClearQuest=7.1.1.8
IBM Rational ClearQuest=7.1.2
IBM Rational ClearQuest=7.1.2.1
IBM Rational ClearQuest=7.1.2.2
IBM Rational ClearQuest=7.1.2.3
IBM Rational ClearQuest=7.1.2.4
IBM Rational ClearQuest=7.1.2.5
IBM Rational ClearQuest=7.1.2.6
IBM Rational ClearQuest=8.0.0
IBM Rational ClearQuest=8.0.0.1
IBM Rational ClearQuest=8.0.0.2
Event History
Aug 17, 2012
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2168?
CVE-2012-2168 is rated as a medium severity vulnerability.
2
How do I fix CVE-2012-2168?
To fix CVE-2012-2168, upgrade to IBM Rational ClearQuest version 7.1.2.7 or 8.0.0.3 and later.
3
Who is affected by CVE-2012-2168?
CVE-2012-2168 affects IBM Rational ClearQuest versions 7.1.1.1 to 7.1.2.6 and 8.0.0 to 8.0.0.2.
4
What type of information can be exposed in CVE-2012-2168?
CVE-2012-2168 can expose sensitive stack-trace information through error messages.
5
Can CVE-2012-2168 be exploited remotely?
Yes, CVE-2012-2168 can be exploited by remote authenticated users.