リモートホストに、7.1.2.15 以前の 7.1.x/ 8.0.0.12 以前の 8.0.0.x/8.0.1.5 以前の 8.0.1.x の IBM Rational ClearQuest がインストールされています。このため、複数の脆弱性の影響を受ける可能性があります：

  - A security bypass vulnerability exists due to an error in the login form which allows a remote attacker to perform brute-force attacks. (CVE-2014-3101)

  - A security bypass vulnerability exists due to the lack of the secure flag for the session cookie during an SSL session. (CVE-2014-3103)

  - A denial of service vulnerability exists due to improper parsing of recursion during entity expansion of XML documents. (CVE-2014-3104)

  - A user enumeration vulnerability exists in the Open Services for Lifecycle Collaboration (OSLC) due to different error messages being displayed when a user submits valid and invalid credentials. (CVE-2014-3105)

  - A security bypass vulnerability exists due to improper enforcement of the 'Local Access Only' ACL related to the Help Server Administrator system. (CVE-2014-3106)

検出

IBM Rational ClearQuest 7.1.x < 7.1.2.15 / 8.0.0.x < 8.0.0.12 / 8.0.1.x < 8.0.1.5 複数の脆弱性（認証済みのチェック）

medium Nessus プラグイン ID 81783

変更ログが見つかりません