NVD

Id
8334  
Name
CVE-2011-1390  
Description
SQL injection vulnerability in the Maintenance tool in IBM Rational ClearQuest 7.1.1.x before 7.1.1.9, 7.1.2.x before 7.1.2.6, and 8.x before 8.0.0.2 allows remote attackers to execute arbitrary SQL commands by leveraging an error in the user-database upgrade feature.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2012-05-14  
Modified Date
2012-10-29  
Seq
2011-1390  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
47754 8334 CVE-2011-1390 http://www-01.ibm.com/support/docview.wss?uid=swg21594717  View
47755 8334 CVE-2011-1390 53483  View
47756 8334 CVE-2011-1390 1027060  View
47757 8334 CVE-2011-1390 rcq-maintenancetool-sql-injection(71802)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26689 JVNDB-2012-002396 IBM Rational ClearQuest のメンテナンスツールにおける SQL インジェクションの脆弱性 IBM Rational ClearQuest のメンテナンスツールには、SQL インジェクションの脆弱性が存在します。 CVE-2011-1390 49297 CVE-2011-1390 8334 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002396.html 2012-05-10 2012-05-16 View