PM62762: Cross Site Scripting (XSS) - persitent

Rational ClearQuest Fix Pack 07 (7.1.2.7) for 7.1.2
Rational ClearQuest Fix Pack 14 (7.1.2.14) for 7.1.2
Rational ClearQuest Fix Pack 15 (7.1.2.15) for 7.1.2
Rational ClearQuest Fix Pack 16 (7.1.2.16) for 7.1.2
Rational ClearQuest Fix Pack 17 (7.1.2.17) for 7.1.2
Rational ClearQuest Fix Pack 18 (7.1.2.18) for 7.1.2
Rational ClearQuest Fix Pack 19 (7.1.2.19) for 7.1.2

APAR status

• Closed as program error.

Error description

• A Cross Site Scripting (XSS) problem was found.
  

Local fix

• Alternatively, use ClearQuest 8.x.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Cross Site Scripting (XSS) problem was found.  This is not a
  problem in ClearQuest 8.0.
  

Problem conclusion

• A Cross Site Scripting (XSS) problem was fixed.
  
  A fix is available in ClearQuest 7.1.2.7.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  CLEARQUEST UNIX

• Fixed component ID

  5724G3601

Applicable component levels

• R712 PSN

     UP