CVEvulnerability

CVE-2014-0950

7.1 HIGH Published 2018-04-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-04-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.1 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
CVSS 2.0 ([email protected])
5.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:P
Weaknesses
CWE-611

Description

Multiple XML external entity (XXE) vulnerabilities in (1) CQWeb / CM Server, (2) ClearQuest Native client, (3) ClearQuest Eclipse client, and (4) ClearQuest Eclipse Designer components in IBM Rational ClearQuest 7.1.1 through 7.1.1.9, 7.1.2 through 7.1.2.13, 8.0.0 through 8.0.0.10, and 8.0.1 through 8.0.1.3 allow remote attackers to cause a denial of service or access other servers via crafted XML data. IBM X-Force ID: 92623.

Affected configurations

• ibm rational clearquest (>= 7.1.1 <= 7.1.1.9) • ibm rational clearquest (>= 7.1.2 <= 7.1.2.13) • ibm rational clearquest (>= 8.0.0 <= 8.0.0.10) • ibm rational clearquest (>= 8.0.1 <= 8.0.1.3)

Related

Weakness · CWE (1)

  • CWE-611 Improper Restriction of XML External Entity Reference weakness

References