3.7
Faible
CVE-2016-2922 IBM Rational ClearQuest 8.0 through 8.0.1.9 and 9.0 through 9.0.1.3 (CQ OSLC linkages, EmailRelay) fails to check the…
Description
IBM Rational ClearQuest 8.0 through 8.0.1.9 and 9.0 through 9.0.1.3 (CQ OSLC linkages, EmailRelay) fails to check the SSL certificate against the requested hostname. It is subject to a man-in-the-middle attack with an impersonating server observing all the data transmitted to the real server. IBM X-Force ID: 113353.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Rational ClearQuest 9.0 | 9.0 → 9.0.1.3 | Pas de correctif indiqué |
| Rational ClearQuest 8.0 | 8.0 → 8.0.1.17 | Pas de correctif indiqué |