PT-2012-3852
CVE-2012-2169
·
تاريخ النشر
2012-08-17
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
3.5
منخفضةالمقاييسAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
IBM Rational ClearQuest versions 7.1.x through 7.1.2.6
Description
A cross-site scripting (XSS) issue exists in the file-upload functionality of the Web client, allowing remote authenticated users to inject arbitrary web script or HTML via the
File Description field.Recommendations
For IBM Rational ClearQuest versions 7.1.x through 7.1.2.6, update to version 7.1.2.7 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾