CVE-2014-0950: XEE
Multiple XML external entity (XXE) vulnerabilities in (1) CQWeb / CM Server, (2) ClearQuest Native client, (3) ClearQuest Eclipse client, and (4) ClearQuest Eclipse Designer components in IBM Rational ClearQuest 7.1.1 through 7.1.1.9, 7.1.2 through 7.1.2.13, 8.0.0 through 8.0.0.10, and 8.0.1 through 8.0.1.3 allow remote attackers to cause a denial of service or access other servers via crafted XML data. IBM X-Force ID: 92623.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0950?
CVE-2014-0950 is classified as a high-severity vulnerability due to the potential for unauthorized data access.
How do I fix CVE-2014-0950?
To fix CVE-2014-0950, update IBM Rational ClearQuest to a version that addresses the XML external entity vulnerabilities.
What versions of IBM Rational ClearQuest are affected by CVE-2014-0950?
CVE-2014-0950 impacts IBM Rational ClearQuest versions from 7.1.1 to 8.0.1.3.
What type of vulnerability is CVE-2014-0950?
CVE-2014-0950 is an XML External Entity (XXE) vulnerability.
Can CVE-2014-0950 lead to data leakage?
Yes, CVE-2014-0950 can lead to potential data leakage if exploited.