Find below the details of a vulnerability in the HP Quality Center product (formely Mercury Quality Center).
Introduction
------------------
Quality Center (QC) is a web-based QA testing and management tool. It is a product from HP when they took over Mercury Interactive last year.
The front-end of the application is composed of COM components that plug into the web browser. Quality Center provides a customization capability (called workflow) which allow the administrator to modify the default behavior. This workflow is driven by VBScript functions that are called whenever a particular event occurs on the client front-end.
In order to optimize the interaction speed of the application, a cache folder is created on the client machine. By default, this folder is located at %tmp%/TD_80. Whenever a user connects to a Quality Center project, 2 folders are created within the cache folder. One of these folders contain a copy of the workflow scripts used to customize the application. Indeed, those files are required on the client machine because the workflow is execute on the client, not on the server.
There exists 1 VBScript workflow file per feature. Those are:
* Login/Logout (common.tds)
* Defects module (defects.tds)
* Manual Test Execution (manrun.tds)
* Test Requirements module (req.tds)
* Test Lab module (testlab.tds)
* Test Plan module (testplan.tds)
The customization feature of Quality Center is often used for:
* Controlling password compliance (no blank password, more than 8 letters, etc.)
* Chained lists (when a value is selected in a field, another field gets updated with a list relevant to that value)
* Automatic updates to some QC components (Test, Test Set, Defect objects, hidden fields)
* Hidding information depending on the user's group (used when a project is shared with different vendors)
* Others
The workflow is often driven by using the OTA (Open Test Architecture), the Quality Center API. This API allows the manipulation of any QC object (e.g. Subject folder, Test/Defect objects, Fields, etc.). It also allows the direct manipulation of the database used by Quality Center.
Issue
-------
When a user connects to Quality Center, the cache folder is automatically updated with the latest VBScript workflow files. Those files are then read by the QC front-end only once for the whole session. They are then used by the application whenever the associated events are raised.
There are 2 main points that make this workflow highly vulnerable:
1. Those files are written in plain text;
2. Marking those files as read-only (through the file properties) will prevent Quality Center from overwriting them.
If a user modifies this file and then mark it as read-only, he can execute arbitrary code. As the OTA API allows access to the database, he can also modify the data stored in the database as follows:
* Quality Center 9.2 (Unconfirmed)
- Severity High: user has higher capability than defined by their profile
* Quality Center 9.0 Patch< 17
- Severity Highly Critical: a user (even with a Viewer profile) can amend the data rendering it useless. He will also have higher capability than defined by their profile
* Quality Center 8.2 / 8.0 (Unconfirmed)
- Severity Highly Critical: a user (even with a Viewer profile) can amend the data rendering it useless. He will also have higher capability than defined by their profile
* TestDirector (Any Version)
- TestDirector is the former name of Quality Center
- Potentially the same issues as for Quality Center 9.0 Patch < 17
Please note that HP has released a patch that fixes this issue, please contact HP support for further details.
Example
------------
This really short example shows how a user can simply change the content of all the defects to some meaningless values:
Sub Defects_Bug_MoveTo
Set objCommand = TDConnection.Command
objCommand.CommandText = 'UPDATE BUG SET BG_SUMMARY='Useless', BG_DESCRIPTION='Useless'
objCommand.Execute
End Sub
Other Information
-------------------------
Discovered By: Exposit Limited
Internet: http://www.exposit.co.uk
Exposit Limited is a functional testing consultancy company specialized in HP (formely Mercury) Testing Tools.

HP Mercury Quality Center ActiveX Control Buffer Overflow Vulnerability Solution: The vendor has released updates. Please see the references for more information. HP Mercury Quality Center 8.2.SP1. 'HP Quality Center has several modules—requirements management, release and cycle management, test plan, test lab, defects management, and dashboard reporting—that are seamlessly integrated to allow for the smooth flow of information across testing stages.' More of the write found here: http://h20195.www2.hp.com/V2/GetPDF.aspx/4AA0-9587ENW.pdf.

(Redirected from HP Quality Center)

Micro Focus Quality Center
Stable release
Developer(s)	Micro Focus / Hewlett Packard Enterprise Software / Mercury Interactive
Operating system	Windows, Linux
Type	Quality management/Test management
License	Proprietary
Website	Micro Focus Quality Center Enterprise

Micro Focus Quality Center, formerly known as HP Quality Center is a quality management software offered by Micro Focus, who acquired the software division of Hewlett Packard Enterprise in 2017,^[2] with many capabilities acquired from Mercury Interactive Corporation.^[3] Quality Center offers software quality assurance, including requirements management, test management and business process testing for IT and application environments.^[4] Quality Center is a component of the Micro Focus Application Lifecycle Management software set.^[5]

Product packaging[edit]

Micro Focus Quality Center is available in the following editions:^[6]

Community
Express
Enterprise

Community and Express editions are designed for entry-level software qualityassurance organizations. The Enterprise edition, originally called Mercury TestDirector for Quality Center, is for software quality assurance organizations that manage medium to large releases. For large and global organizations, Micro Focus Application Lifecycle Management incorporates the capabilities of Quality Center Enterprise Tracking, Enterprise Release Management and Asset Sharing for requirements management through application delivery.^[7]Quality Center is also available as a Software-as-a-Service offering.^[8]

System requirements[edit]

Micro Focus Quality Center runs on the Windows platforms with an Internet Explorer browser. In combination with the ALM Explorer Add-in, it can be executed as a normal desktop application.

Micro Focus has published information regarding about ALM's server-side and client-side system requirements, and are updated periodically as new versions and patches are released. Archicad 20 free download with crack 64 bit.

Qsl card maker for mac. QSL Card Creator There have been 525,910 cards generated since April 19, 2011. You can use this web page to create QSL cards. The cards will be created in the form of a PDF document that you can then print on light-weight card stock.

Hp Mercury Quality Center Download

References[edit]

^'Announcing Service Pack 1 for ALM/Quality Center 15.5 - Micro Focus Community'. community.microfocus.com. Retrieved 2021-04-15.
^'HPE Merger Status Update' (Press release). Micro Focus. Retrieved March 9, 2018.CS1 maint: discouraged parameter (link)
^'HP Closes Landmark Mercury Acquisition; Companies Unite to Lead in Business Technology Optimization Software' (Press release). Hewlett Packard. November 7, 2006. Archived from the original on February 2, 2013. Retri