APAR status

• Closed as program error.

Error description

• CQ Web Cross-site scripting vulnerability problem. Some of the p
  roblem fixed in 2007D - 2008B. But there are still 16 files have
   Cross-site scripting problem.
  

Local fix

Problem summary

• A security vulnerability exists in ClearQuest Web.
  

Problem conclusion

• A fix is available in ClearQuest versions 7.0.0.4 and 7.0.1.3
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  CLEARQUEST WIN

• Fixed component ID

  5724G3600

Applicable component levels

• R700 PSY

     UP

• R701 PSY

     UP

• R603 PSN

     UP

• R604 PSN

     UP

• R605 PSN

     UP

• R606 PSN

     UP

• R60W PSN

     UP

• R710 PSN

     UP

IBM, the IBM logo and ibm.com are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.

Product categories:

Software

Software Development

Change, Configuration, & Release Management

Rational ClearQuest

Software version:

701

Reference #:

PK69316

IBM Group:

Software Group

Modified date:

2008-12-01