CVE-2012-2169: XSS
Published Aug 17, 2012
·Updated
Cross-site scripting (XSS) vulnerability in the file-upload functionality in the Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 allows remote authenticated users to inject arbitrary web script or HTML via the File Description field.
Affected Software
15 affected components
IBM Rational ClearQuest=7.1.1.1
IBM Rational ClearQuest=7.1.1.2
IBM Rational ClearQuest=7.1.1.3
IBM Rational ClearQuest=7.1.1.4
IBM Rational ClearQuest=7.1.1.5
IBM Rational ClearQuest=7.1.1.6
IBM Rational ClearQuest=7.1.1.7
IBM Rational ClearQuest=7.1.1.8
IBM Rational ClearQuest=7.1.2
IBM Rational ClearQuest=7.1.2.1
IBM Rational ClearQuest=7.1.2.2
IBM Rational ClearQuest=7.1.2.3
IBM Rational ClearQuest=7.1.2.4
IBM Rational ClearQuest=7.1.2.5
IBM Rational ClearQuest=7.1.2.6
Event History
Aug 17, 2012
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2169?
CVE-2012-2169 has a medium severity level due to its potential for allowing XSS attacks.
2
How do I fix CVE-2012-2169?
To fix CVE-2012-2169, upgrade IBM Rational ClearQuest to version 7.1.2.7 or later.
3
Who is affected by CVE-2012-2169?
CVE-2012-2169 affects users of IBM Rational ClearQuest versions prior to 7.1.2.7.
4
What type of vulnerability is CVE-2012-2169?
CVE-2012-2169 is classified as a Cross-site scripting (XSS) vulnerability.
5
Can CVE-2012-2169 be exploited without authentication?
No, CVE-2012-2169 requires remote authenticated users to exploit the vulnerability.