CVE-2012-5765 : The Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 an

The Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a SQL error message.

Published 2012-12-20 12:02:20

Updated 2025-04-11 00:51:22

Source IBM Corporation

View at NVD, CVE.org

Products affected by CVE-2012-5765

IBM » Rational Clearquest » Version: 7.1.2
cpe:2.3:a:ibm:rational_clearquest:7.1.2:*:*:*:*:*:*:*
Matching versions
IBM » Rational Clearquest » Version: 7.1.2.4
cpe:2.3:a:ibm:rational_clearquest:7.1.2.4:*:*:*:*:*:*:*
Matching versions
IBM » Rational Clearquest » Version: 7.1.2.5
cpe:2.3:a:ibm:rational_clearquest:7.1.2.5:*:*:*:*:*:*:*
Matching versions
IBM » Rational Clearquest » Version: 7.1.2.1
cpe:2.3:a:ibm:rational_clearquest:7.1.2.1:*:*:*:*:*:*:*
Matching versions
IBM » Rational Clearquest » Version: 7.1.2.2
cpe:2.3:a:ibm:rational_clearquest:7.1.2.2:*:*:*:*:*:*:*
Matching versions
IBM » Rational Clearquest » Version: 7.1.2.3
cpe:2.3:a:ibm:rational_clearquest:7.1.2.3:*:*:*:*:*:*:*
Matching versions
IBM » Rational Clearquest » Version: 8.0.0.1
cpe:2.3:a:ibm:rational_clearquest:8.0.0.1:*:*:*:*:*:*:*
Matching versions
IBM » Rational Clearquest » Version: 7.1.2.6
cpe:2.3:a:ibm:rational_clearquest:7.1.2.6:*:*:*:*:*:*:*
Matching versions
IBM » Rational Clearquest » Version: 8.0.0
cpe:2.3:a:ibm:rational_clearquest:8.0.0:*:*:*:*:*:*:*
Matching versions
IBM » Rational Clearquest » Version: 8.0.0.2
cpe:2.3:a:ibm:rational_clearquest:8.0.0.2:*:*:*:*:*:*:*
Matching versions
IBM » Rational Clearquest » Version: 8.0.0.3
cpe:2.3:a:ibm:rational_clearquest:8.0.0.3:*:*:*:*:*:*:*
Matching versions
IBM » Rational Clearquest » Version: 7.1.2.8
cpe:2.3:a:ibm:rational_clearquest:7.1.2.8:*:*:*:*:*:*:*
Matching versions
IBM » Rational Clearquest » Version: 7.1.2.7
cpe:2.3:a:ibm:rational_clearquest:7.1.2.7:*:*:*:*:*:*:*
Matching versions
IBM » Rational Clearquest » Version: 8.0.0.4
cpe:2.3:a:ibm:rational_clearquest:8.0.0.4:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2012-5765

EPSS FAQ

0.25%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 46 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2012-5765

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

CWE ids for CVE-2012-5765

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2012-5765

https://exchange.xforce.ibmcloud.com/vulnerabilities/80211

IBM Rational ClearQuest SQL error information disclosure CVE-2012-5765 Vulnerability Report
http://www-01.ibm.com/support/docview.wss?uid=swg21620048

IBM Security Bulletin: ClearQuest SQL Error Message Attack Vulnerability (CVE-2012-5765)
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PM72905

IBM PM72905: SQL error message vulnerability
Vendor Advisory

Jump to

Vulnerability Details : CVE-2012-5765

Products affected by CVE-2012-5765

Exploit prediction scoring system (EPSS) score for CVE-2012-5765

CVSS scores for CVE-2012-5765

CWE ids for CVE-2012-5765

References for CVE-2012-5765