CVE-2010-4600:dojo_toolkit, rational_clearquest: Dojo Toolkit, as used in the Web client in IBM Rati...

VRDA Feed by

Vulnerability Response Decision Assistance Feed : Information for vulnerability impact analysis

[ about VRDA Feed | JPCERT/CC ]

Vulnerability Analysis Result (Revision No : 1)

[ Download XML ]

CVE-2010-4600

dojo_toolkit, rational_clearquest: Dojo Toolkit, as used in the Web client in IBM Rati...

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-4600

Original

Dojo Toolkit, as used in the Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1, allows remote attackers to read cookies by navigating to a Dojo file, related to an "open direct" issue.

Translation (Show)

About This Analysis Information

Analysis Information Provider:

NIST NVD

First Published:

2010-12-29

Source Information Category:

Advisory, Alert

Last Updated:

2010-12-29

Affected Product Tags

cpe:/a:dojofoundation:dojo_toolkit

cpe:/a:ibm:rational_clearquest:7.1.1.1

cpe:/a:ibm:rational_clearquest:7.1.1.2

cpe:/a:ibm:rational_clearquest:7.1.1.3

cpe:/a:ibm:rational_clearquest:7.1.2

Vulnerability Analysis Results

[Access Vector] ^[?]

Undefined^[?]

Local^[?]

Adjacent Network^[?]

Network^[?]

[Access Complexit] ^[?]

Undefined^[?]

High^[?]

Medium^[?]

Low^[?]

[Authentication] ^[?]

Undefined^[?]

Multiple^[?]

Single^[?]

None^[?]

[Confidentiality Impact] ^[?]

Undefined^[?]

None^[?]

Partial^[?]

Complete^[?]

[Integrity Impact] ^[?]

Undefined^[?]

None^[?]

Partial^[?]

Complete^[?]

[Availability Impact] ^[?]

Undefined^[?]

None^[?]

Partial^[?]

Complete^[?]

Alternatives

References

AIXAPAR PM15146

CONFIRM ftp://public.dhe.ibm.com/software/rational/clearquest/7.1.1/7.1.1.4-RATL-RCQ/7.1.1.4-RATL-RCQ.ux.readme

SECUNIA 42624

Vulnerability Type Information Leak / Disclosure (CWE-200)