4

CVE-2010-4602

Exploit

EPSS 0.18%
Published 29.12.2010 18:00:03
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

The Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1 allows remote authenticated users to bypass "restricted user" limitations, and read arbitrary records, via a modified record number in the URL for a RECORD action, as demonstrated by a modified bookmark.

Affected products Warnungen 0 Metrics 2 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Ibm ≫ Rational Clearquest Version7.1.1.1

Ibm ≫ Rational Clearquest Version7.1.1.2

Ibm ≫ Rational Clearquest Version7.1.1.3

Ibm ≫ Rational Clearquest Version7.1.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.18%	0.362

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N

ftp://public.dhe.ibm.com/software/rational/clearquest/7.1.1/7.1.1.4-RATL-RCQ/7.1.1.4-RATL-RCQ.ux.readme

http://www-01.ibm.com/support/docview.wss?uid=swg1PM20172

Exploit

http://www.securityfocus.com/bid/45646

https://exchange.xforce.ibmcloud.com/vulnerabilities/64440

https://nvd.nist.gov/vuln/detail/CVE-2010-4602

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-4602

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-4602

EUVD