CVE-2014-3106

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-09-23 · updated 2026-06-17
Weakness: CWE-287

Description

IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not properly implement the Local Access Only protection mechanism, which allows remote attackers to bypass authentication and read files via the Help Server Administration feature.

Affected products

IBM Rational ClearCase: 7.1, 7.1.0.1, 7.1.0.2, 7.1.1, 7.1.1.1, 7.1.1.2 (+38)

References

http://www-01.ibm.com/support/docview.wss?uid=swg21682950
https://exchange.xforce.ibmcloud.com/vulnerabilities/94313
http://www-01.ibm.com/support/docview.wss?uid=swg21682950
https://exchange.xforce.ibmcloud.com/vulnerabilities/94313

Get alerted when CVE-2014-3106 or the next vulnerability affects your stack