IBM Rational ClearQuest contains a flaw that may allow a remote denial of service. The issue is triggered when the program fails to prevent modification of back-reference fields, allowing a remote authenticated attacker to cause a denial of service by adding or removing a back reference.
Classification
Location:
Remote / Network Access
Attack Type:
Denial of Service
Impact:
Loss of Availability
Solution:
Upgrade
Exploit:
Exploit Public
Disclosure:
Vendor Verified
OSVDB:
Authentication Required
Solution
Upgrade to version 7.0.1.11, 7.1.1.4, 7.1.2.1 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
