CVE-2012-2168 — Sensitive Information Exposure in IBM Rational Clearquest

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
4.0MEDIUMNVD
EPSS
0.2%
top 60.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Rational Clearquest
Timeline
PublishedAug 17
Latest updateMay 17

Description

IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to obtain sensitive stack-trace information from CM server error messages via an invalid parameter.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 8.0 | Impact: 2.9

Affected Packages1 packages

▶NVDibm/rational_clearquest18 versions+17

🔴Vulnerability Details

2
GHSA
GHSA-6vc4-967q-qmcm: IBM Rational ClearQuest 7↗2022-05-17
▶
CVEList
CVE-2012-2168: IBM Rational ClearQuest 7↗2012-08-17
▶
CVE-2012-2168 — Sensitive Information Exposure in IBM | cvebase