CVE-2010-4600: Dojofoundation Dojo Toolkit

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Dojo Toolkit, as used in the Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1, allows remote attackers to read cookies by navigating to a Dojo file, related to an "open direct" issue.

Affected products

• Dojofoundation Dojo Toolkit: any version
• IBM Rational Clearquest: version 7.1.1.1 only; version 7.1.1.2 only; version 7.1.1.3 only; version 7.1.2 only

Published 2010-12-29. Last modified 2026-06-16.