The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a vigilance database and tools to fix them.

Computer vulnerabilities of Rational ClearCase

OpenSSL: information disclosure via PKCS7/CMS Padding Oracle
An attacker can bypass access restrictions to data via PKCS7/CMS Padding Oracle of OpenSSL, in order to obtain sensitive information...
1137844, 1172266, 1172278, 3456663, 5695611, 5695629, 5695653, 5695851, 6199286, 6201879, CERTFR-2019-AVI-444, cpuapr2020, cpuoct2019, CVE-2019-1563, DLA-1932-1, DSA-2019-201, DSA-2020-062, DSA-4539-1, DSA-4539-2, DSA-4539-3, DSA-4540-1, JSA11074, NTAP-20190919-0002, openSUSE-SU-2019:2158-1, openSUSE-SU-2019:2189-1, openSUSE-SU-2019:2268-1, openSUSE-SU-2019:2269-1, RHSA-2020:1840-01, SSA:2019-254-03, STORM-2019-018, SUSE-SU-2019:14171-1, SUSE-SU-2019:14174-1, SUSE-SU-2019:2397-1, SUSE-SU-2019:2403-1, SUSE-SU-2019:2410-1, SUSE-SU-2019:2413-1, SUSE-SU-2019:2504-1, SUSE-SU-2019:2558-1, SUSE-SU-2019:2561-1, SUSE-SU-2020:0099-1, SUSE-SU-2020:2634-1, USN-4376-1, USN-4376-2, USN-4504-1, VIGILANCE-VUL-30293
WebSphere AS: directory traversal via Admin Console
An attacker can traverse directories via Admin Console of WebSphere AS, in order to read a file outside the service root path...
1079031, 1086399, 1086423, 1086459, 1086477, 1086483, 1106955, 1106967, 3380121, CVE-2019-4442, VIGILANCE-VUL-30280
libexpat: out-of-bounds memory reading via XML_GetCurrentLineNumber
An attacker can force a read at an invalid address via XML_GetCurrentLineNumber() of libexpat, in order to trigger a denial of service, or to obtain sensitive information...
3609135, CERTFR-2019-AVI-535, cpuapr2020, cpuoct2020, CVE-2019-15903, DLA-1912-1, DLA-1987-1, DLA-1997-1, DSA-4530-1, DSA-4549-1, DSA-4571-1, DSA-4571-2, FEDORA-2019-672ae0f060, FEDORA-2019-6dcf885e38, FEDORA-2019-9505c6b555, FEDORA-2019-9b4ebc2973, HT210785, HT210788, JSA11074, MFSA-2019-33, MFSA-2019-34, MFSA-2019-35, openSUSE-SU-2019:2204-1, openSUSE-SU-2019:2205-1, openSUSE-SU-2019:2420-1, openSUSE-SU-2019:2424-1, openSUSE-SU-2019:2425-1, openSUSE-SU-2019:2447-1, openSUSE-SU-2019:2451-1, openSUSE-SU-2019:2452-1, openSUSE-SU-2019:2459-1, openSUSE-SU-2019:2464-1, openSUSE-SU-2020:0010-1, openSUSE-SU-2020:0086-1, RHSA-2019:3210-01, RHSA-2019:3237-01, RHSA-2019:3756-01, RHSA-2020:3952-01, RHSA-2020:4484-01, SSA:2019-259-01, SSA:2019-293-01, SSA:2019-295-01, SSB-439005, SUSE-SU-2019:2429-1, SUSE-SU-2019:2440-1, SUSE-SU-2019:2871-1, SUSE-SU-2019:2872-1, SUSE-SU-2019:2912-1, SUSE-SU-2020:0114-1, SUSE-SU-2020:0302-1, USN-4132-1, USN-4132-2, USN-4165-1, USN-4165-2, USN-4202-2, VIGILANCE-VUL-30268
WebSphere AS: Cross Site Scripting via Admin Console
An attacker can trigger a Cross Site Scripting via Admin Console of WebSphere AS, in order to run JavaScript code in the context of the web site...
1079031, 1086399, 1086423, 1086459, 1086477, 1086483, 1106955, 1106967, 884040, CVE-2019-4271, VIGILANCE-VUL-30236
Apache Commons Beanutils: information disclosure via BeanIntrospector
An attacker can bypass access restrictions to data via BeanIntrospector of Apache Commons Beanutils, in order to obtain sensitive information...
1115085, 1119387, 3407751, 6198380, 6369095, CERTFR-2020-AVI-179, cpujan2021, cpujul2020, CVE-2019-10086, DLA-1896-1, DSA-2019-189, FEDORA-2019-79b5790566, FEDORA-2019-bcad44b5d6, openSUSE-SU-2019:2058-1, RHSA-2019:4317-01, RHSA-2020:0057-01, RHSA-2020:0194-01, RHSA-2020:0804-01, RHSA-2020:0805-01, RHSA-2020:0806-01, RHSA-2020:0811-01, RHSA-2020:0951-01, RHSA-2020:0952-01, SUSE-SU-2019:2244-1, SUSE-SU-2019:2245-1, VIGILANCE-VUL-30143
Eclipse OpenJ9: privilege escalation via Absolute RPATH
An attacker can bypass restrictions via Absolute RPATH of Eclipse OpenJ9, in order to escalate his privileges...
1072346, 1073908, 1087227, 1101261, 1108107, 1109829, 6199287, 6199289, 967217, CVE-2019-11771, ibm10964780, SUSE-SU-2019:14160-1, SUSE-SU-2019:14188-1, SUSE-SU-2019:2291-1, SUSE-SU-2019:2336-1, SUSE-SU-2019:2371-1, VIGILANCE-VUL-30137
IBM Java: privilege escalation via Absolute RPATH
An attacker can bypass restrictions via Absolute RPATH of IBM Java, in order to escalate his privileges...
1072346, 1073908, 1087227, 1101261, 1108107, 1109829, 6199287, 6199289, 967217, CVE-2019-4473, ibm10964780, SUSE-SU-2019:14160-1, SUSE-SU-2019:14188-1, SUSE-SU-2019:2291-1, SUSE-SU-2019:2336-1, SUSE-SU-2019:2371-1, VIGILANCE-VUL-30136
Apache httpd: six vulnerabilities
An attacker can use several vulnerabilities of Apache httpd...
1079541, 1097703, 964768, bulletinoct2019, CERTFR-2019-AVI-402, cpuapr2020, cpuoct2020, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10097, CVE-2019-10098, CVE-2019-9517, DLA-1900-1, DLA-1900-2, DSA-4509-1, DSA-4509-2, DSA-4509-3, FEDORA-2019-099575a123, FEDORA-2019-63ba15cc83, FEDORA-2019-e00c65ec6f, K25126370, openSUSE-SU-2019:2051-1, RHSA-2019:2949-01, RHSA-2019:4126-01, RHSA-2020:3958-01, RHSA-2020:4751-01, SSA:2020-091-02, SUSE-SU-2019:2237-1, SUSE-SU-2019:2329-1, SYMSA16056, USN-4113-1, USN-4113-2, VIGILANCE-VUL-30057
OpenSSL Windows: privilege escalation via OPENSSLDIR
An attacker can bypass restrictions via OPENSSLDIR of OpenSSL Windows, in order to escalate his privileges...
1172266, 1172278, 3456663, 5695611, 5695629, 5695653, 5695851, 6199286, 6201879, CERTFR-2019-AVI-362, cpuapr2020, cpuoct2019, CVE-2019-1552, DSA-2020-062, FEDORA-2019-00c25b9379, JSA11074, VIGILANCE-VUL-29914
IBM WebSphere AS: information disclosure via Admin Console
An attacker can bypass access restrictions to data via Admin Console of IBM WebSphere AS, in order to obtain sensitive information...
CVE-2019-4269, ibm10884032, ibm10957573, VIGILANCE-VUL-29636
Our database contains other pages. You can request a free trial to read them.

Display information about Rational ClearCase: