{"id":"CVE-2013-0598","aliases":["EUVD-2013-0609","GHSA-4mfg-22xg-v2xx"],"status":"published","title":"Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1...","description":"Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the authentication of arbitrary users.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00636,"percentile":0.50759,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2013-09-28T01:00:00Z","modified":"2026-06-16T23:49:43Z","products":[{"vendor":"ibm","product":"rational_clearquest"}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PM88185","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/83611","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21648665","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0598"},{"url":"https://github.com/advisories/GHSA-4mfg-22xg-v2xx"}],"sources":{"cve":[{"id":"CVE-2013-0598","description":"Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the authentication of arbitrary users.","status":"published","published":"2013-09-28T01:00:00Z","modified":"2024-08-06T14:33:05.571Z","updated_at":"2026-11-02T14:34:59.551717Z"}],"euvd":[{"id":"EUVD-2013-0609","description":"Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the authentication of arbitrary users.","status":"published","published":"2013-09-28T01:00:00Z","modified":"2024-08-06T14:33:05Z","updated_at":"2026-11-03T01:56:44.745992Z"}],"ghsa":[{"id":"GHSA-4mfg-22xg-v2xx","title":"Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1...","description":"Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the authentication of arbitrary users.","status":"published","published":"2022-05-17T01:36:52Z","modified":"2023-02-03T05:04:41Z","cwes":["CWE-352"],"updated_at":"2026-11-02T14:53:36.332016Z"}],"nvd":[{"id":"CVE-2013-0598","description":"Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the authentication of arbitrary users.","status":"published","published":"2013-09-28T03:40:55.387Z","modified":"2026-06-16T23:49:43.573Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:02:38.715467Z"}]}}