USA / Canada 866-503-1471

International +31 85 064 4633

« Blog Home

FLASH: Vulnerability in IBM Rational ClearCase ClearQuest with potential for TLS Attack

September 23, 2013 ¬ 9:04 pmh.Noa Harel

The IBM GSKit component used in Rational ClearCase and ClearQuest is susceptible to a Transport Layer Security protocol (used in HTTPS) vulnerability known as “Lucky Thirteen.” The vulnerability might allow remote attackers to conduct distinguishing and plain-text recovery attacks by statistically analyzing timing data for crafted packets.

Remediation:
Upgrade to latest version: 7.1.2.12, 8.0.0.8 or 8.0.1.1

Learn more:

ClearCase, ClearQuest, Security

    * Full Name

    * Work Email

    * Are you using any AI tools today? What tools?

    Your information will be securely sent to and stored in Google Sheets for the purpose of processing your form submission.

      * Full Name

      * Work Email

      Are you using any SCA solution? Which one?

      Your information will be securely sent to and stored in Google Sheets for the purpose of processing your form submission.

        * Full Name

        * Work Email

        * Are you using OpenProject?

        Do you have any questions you'd like to ask before the webinar?

        Your information will be securely sent to and stored in Google Sheets for the purpose of processing your form submission.

          * Full Name

          * Work Email

          * Are you using any Secrets Management solution? Which one?

          Your information will be securely sent to and stored in Google Sheets for the purpose of processing your form submission.