Lucene search
HistoryAug 08, 2008 - 7:41 p.m.
CVE-2008-3550
ibm rational clearquest
cqweb
login page
remote attackers
sensitive information
xss
vulnerability.
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
5.6 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
68.3%
The CQWeb login page in IBM Rational ClearQuest 7.0.1 allows remote attackers to obtain potentially sensitive information (page source code) via a combination of ?script? and ?/script? sequences in the id field, possibly related to a cross-site scripting (XSS) vulnerability.
Affected configurations
Node
ibmrational_clearquestMatch7.0.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm:rational_clearquest | ibm rational clearquest | eq | 7.0.1 |
Related
nvd
nvd
CVE-2008-3550
2008-08-08 19:41:00
cvelist
cvelist
CVE-2008-3550
2008-08-08 19:00:00
prion
prion
Cross site scripting
2008-08-08 19:41:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
5.6 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
68.3%
Related for CVE-2008-3550