Valéry Raulet has discovered a vulnerability in HP Quality Center, which can be exploited by malicious users to bypass certain security restrictions.

The vulnerability is caused due to the application insecurely handling cached workflow scripts (e.g. common.tds, defects.tds, manrun.tds, req.tds, testlab.tds, and testplan.tds). This can be exploited to e.g. overwrite items in the database or perform other restricted actions by overwriting the affected files and using the OTA API.

The vulnerability is confirmed in version 9.0 (Evaluation). Other versions may also be affected.

Solution
Reportedly, the vendor has issued patches. Contact the customer support for additional information.

Provided and/or discovered by
Valéry Raulet, Exposit Limited

Original Advisory
http://blogs.exposit.co.uk/2009/02/23/vulnerability-in-quality-center/

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area