3.7
Low
CVE-2016-2922 IBM Rational ClearQuest 8.0 through 8.0.1.9 and 9.0 through 9.0.1.3 (CQ OSLC linkages, EmailRelay) fails to check the…
Description
IBM Rational ClearQuest 8.0 through 8.0.1.9 and 9.0 through 9.0.1.3 (CQ OSLC linkages, EmailRelay) fails to check the SSL certificate against the requested hostname. It is subject to a man-in-the-middle attack with an impersonating server observing all the data transmitted to the real server. IBM X-Force ID: 113353.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Rational ClearQuest 9.0 | 9.0 → 9.0.1.3 | No fix stated |
| Rational ClearQuest 8.0 | 8.0 → 8.0.1.17 | No fix stated |