PM97698: Undisclosed Information Disclosure

Rational ClearQuest Fix Pack 9 (8.0.0.9) for 8.0
Rational ClearQuest Fix Pack 2 (8.0.1.2) for 8.0.1
Rational ClearQuest Fix Pack 11 (8.0.0.11) for 8.0
Rational ClearQuest Fix Pack 4 (8.0.1.4) for 8.0.1
Rational ClearQuest Fix Pack 5 (8.0.1.5) for 8.0.1
Rational ClearQuest Fix Pack 12 (8.0.0.12) for 8.0
Rational ClearQuest Fix Pack 6 (8.0.1.6) for 8.0.1
Rational ClearQuest Fix Pack 13 (8.0.0.13) for 8.0
Rational ClearQuest Fix Pack 14 (8.0.0.14) for 8.0
Rational ClearQuest Fix Pack 7 (8.0.1.7) for 8.0.1
Rational ClearQuest Fix Pack 15 (8.0.0.15) for 8.0
Rational ClearQuest Fix Pack 8 (8.0.1.8) for 8.0.1
Rational ClearQuest Fix Pack 16 (8.0.0.16) for 8.0
Rational ClearQuest Fix Pack 9 (8.0.1.9) for 8.0.1
Rational ClearQuest Fix Pack 17 (8.0.0.17) for 8.0
Rational ClearQuest Fix Pack 10 (8.0.1.10) for 8.0.1
Rational ClearQuest Fix Pack 18 (8.0.0.18) for 8.0
Rational ClearQuest Fix Pack 11 (8.0.1.11) for 8.0.1
Rational ClearQuest Fix Pack 19 (8.0.0.19) for 8.0
Rational ClearQuest Fix Pack 12 (8.0.1.12) for 8.0.1
Rational ClearQuest Fix Pack 20 (8.0.0.20) for 8.0
Rational ClearQuest Fix Pack 13 (8.0.1.13) for 8.0.1
Rational ClearQuest Fix Pack 21 (8.0.0.21) for 8.0
Rational ClearQuest Fix Pack 14 (8.0.1.14) for 8.0.1
Rational ClearQuest Fix Pack 15 (8.0.1.15) for 8.0.1
Rational ClearQuest Fix Pack 16 (8.0.1.16) for 8.0.1
Rational ClearQuest Fix Pack 17 (8.0.1.17) for 8.0.1
Rational ClearQuest Fix Pack 18 (8.0.1.18) for 8.0.1
Rational ClearQuest Fix Pack 19 (8.0.1.19) for 8.0.1

APAR status

• Closed as program error.

Error description

• Vulnerability in IBM Rational ClearQuest Web Client with
  potential for Information Disclosure (CVE-2013-5422)
  
  Please consult the following Security Bulletin technote for more
  information.
  
  http://www-01.ibm.com/support/docview.wss?uid=swg21660036
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  ClearQuest Web security problem was found.  Please consult the
  following Security Bulletin technote for more information.
  http://www-01.ibm.com/support/docview.wss?uid=swg21660036
  

Problem conclusion

• A fix is available in ClearQuest 7.1.2.13, 8.0.0.9, and 8.0.1.2.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  CLEARQUEST WIN

• Fixed component ID

  5724G3600

Applicable component levels

• R712 PSN

     UP