NVD

Id
15852  
Name
CVE-2010-4603  
Description
IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.2.x before 7.1.2.1 does not prevent modification of back-reference fields, which allows remote authenticated users to interfere with intended record relationships, and possibly cause a denial of service (loop) or have unspecified other impact, by (1) adding or (2) removing a back reference.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-12-29  
Modified Date
2011-01-11  
Seq
2010-4603  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
89852 15852 CVE-2010-4603 ftp://public.dhe.ibm.com/software/rational/clearquest/7.1.1/7.1.1.4-RATL-RCQ/7.1.1.4-RATL-RCQ.ux.readme  View
89853 15852 CVE-2010-4603 PM22186  View
89854 15852 CVE-2010-4603 http://www-01.ibm.com/support/docview.wss?uid=swg21125139  View
89855 15852 CVE-2010-4603 45648  View
89856 15852 CVE-2010-4603 clearquest-back-reference-sec-bypass(64439)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37756 JVNDB-2010-003541 IBM Rational ClearQuest におけるレコードリレーションシップに干渉する脆弱性 IBM Rational ClearQuest は、逆参照フィールドの変更を適切に制限しないため、レコードリレーションシップに干渉する、サービス運用妨害 (ループ) 状態となる、またはその他の詳細不明な影響を受ける脆弱性が存在します。 CVE-2010-4603 47183 CVE-2010-4603 15852 6.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003541.html 2010-09-09 2012-03-27 View