CVE-2016-2922

CVE-2016-2922 describes a vulnerability in IBM Rational ClearQuest versions 8.0 through 8.0.1.9 and 9.0 through 9.0.1.3, specifically within its CQ OSLC linkages and EmailRelay components. The flaw stems from a failure to properly validate SSL certificates against the requested hostname, making it susceptible to man-in-the-middle (MitM) attacks. An attacker could exploit this to impersonate a legitimate server, intercepting sensitive data transmitted between the client and the real server. Rated with a CVSSv3 score of 5.9 (Medium), this vulnerability has a network attack vector and high attack complexity, requiring no user interaction. The primary impact is a high compromise of confidentiality, as an attacker could observe all transmitted data. Integrity and availability are not directly impacted. Despite its potential for data interception, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.