CVE-2012-4839

Published Dec 20, 2012 ibm

Overview

CVE-2012-4839 is a known-severity vulnerability affecting ibm rational_clearquest. It was published on December 20, 2012.

Technical Description

The OSLC interface in the Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to conduct phishing attacks via a FRAME element.

Remediation

Check the references section for vendor advisories and patches from ibm. Update rational_clearquest to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status

References

Ref www-01.ibm.com/support/docview.wss?uid=swg21620342 Ref www.securitytracker.com/id?1027889 Ref exchange.xforce.ibmcloud.com/vulnerabilities/79068 Ref www-01.ibm.com/support/docview.wss?uid=swg21620342 Ref www.securitytracker.com/id?1027889 Ref exchange.xforce.ibmcloud.com/vulnerabilities/79068

Frequently Asked Questions

What is CVE-2012-4839?

CVE-2012-4839 is a known-severity vulnerability affecting ibm rational_clearquest. It was published on December 20, 2012.

How severe is CVE-2012-4839?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2012-4839?

How can CyberStrike help with CVE-2012-4839?

CyberStrike's AI-powered security agents can automatically detect CVE-2012-4839 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.