Description
SQL injection vulnerability in the Maintenance tool in IBM Rational ClearQuest 7.1.1.x before 7.1.1.9, 7.1.2.x before 7.1.2.6, and 8.x before 8.0.0.2 allows remote attackers to execute arbitrary SQL commands by leveraging an error in the user-database upgrade feature.
References (6)
Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/81815
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/53483
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1027060
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/49093
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21594717
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/71802
Scores
EPSS
0.0206
EPSS Percentile
79.3%
Details
CWE
CWE-89
Status
published
Products (16)
ibm/rational_clearquest
7.1.1.1
ibm/rational_clearquest
7.1.1.2
ibm/rational_clearquest
7.1.1.3
ibm/rational_clearquest
7.1.1.4
ibm/rational_clearquest
7.1.1.5
ibm/rational_clearquest
7.1.1.6
ibm/rational_clearquest
7.1.1.7
ibm/rational_clearquest
7.1.1.8
ibm/rational_clearquest
7.1.2
ibm/rational_clearquest
7.1.2.1
... and 6 more
Published
May 14, 2012
Tracked Since
Feb 18, 2026