© 2026 vulntracker.io

CVE-2016-2922

LOW

3.7

CVSS Score

Published: August 13, 2018 at 04:00 PM UTC

Updated: June 17, 2026 at 12:44 AM UTC

1 product affected across 1 vendorRational ClearQuest

Using Rational ClearQuest by IBM?

Get instant alerts when new vulnerabilities affect Rational ClearQuest - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

LOW3.7

Exploit prediction

EPSS 0.7%

Description

IBM Rational ClearQuest 8.0 through 8.0.1.9 and 9.0 through 9.0.1.3 (CQ OSLC linkages, EmailRelay) fails to check the SSL certificate against the requested hostname. It is subject to a man-in-the-middle attack with an impersonating server observing all the data transmitted to the real server. IBM X-Force ID: 113353.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Rational ClearQuest · IBM

95%

8.0.0.0 ≤ v ≤ 8.0.0.218.0.1.0 ≤ v ≤ 8.0.1.179.0.0.0 ≤ v ≤ 9.0.0.69.0.1.0 ≤ v ≤ 9.0.1.38.0 8.0.0.1 8.0.0.10 8.0.0.11 8.0.0.12 8.0.0.13 8.0.0.14 8.0.0.15 8.0.0.16 8.0.0.17 8.0.0.18 8.0.0.19 8.0.0.2 8.0.0.20 8.0.0.21 8.0.0.3 8.0.0.4 8.0.0.5 8.0.0.6 8.0.0.7 8.0.0.8 8.0.0.9 8.0.1 8.0.1.1 8.0.1.10 8.0.1.11 8.0.1.12 8.0.1.13 8.0.1.14 8.0.1.15 8.0.1.16 8.0.1.17 8.0.1.2 8.0.1.3 8.0.1.4 8.0.1.5 8.0.1.6 8.0.1.7 8.0.1.8 8.0.1.9 9.0 9.0.0.1 9.0.0.2 9.0.0.3 9.0.0.4 9.0.0.5 9.0.0.6 9.0.1 9.0.1.1 9.0.1.2 9.0.1.3

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (2)

VDB Entryx_refsource_XFVendor Advisory

Source: [email protected]

https://exchange.xforce.ibmcloud.com/vulnerabilities/113353

x_refsource_CONFIRMVendor Advisory

Source: [email protected]

https://www.ibm.com/support/docview.wss?uid=ibm10718377

CVSS

3.7LOWibm

Attack Vector: NETWORK
Complexity: HIGH
Privileges: NONE
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: LOW
Integrity: NONE
Availability: NONE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-295

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card