Lucene search

[email protected]CVE-2008-5328

HistoryDec 05, 2008 - 12:30 a.m.

CVE-2008-5328

2008-12-0500:30:00

CWE-310

[email protected]

web.nvd.nist.gov

ibm

rational clearquest

cve-2008-5328

database security

authentication

sensitive information

nvd

4.6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

5.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.3%

JSON

The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object tree during an import process.

Affected configurations

NVD

Node

ibmrational_clearquestRange≤7.0.0.3

ibmrational_clearquestMatch7.0.0.0

ibmrational_clearquestMatch7.0.0.1

ibmrational_clearquestMatch7.0.0.2

ibmrational_clearquestMatch7.0.1

ibmrational_clearquestMatch7.0.1.1

ibmrational_clearquestMatch7.0.1.2

CPENameOperatorVersion
ibm:rational_clearquestibm rational clearquestle7.0.0.3
ibm:rational_clearquestibm rational clearquesteq7.0.0.0
ibm:rational_clearquestibm rational clearquesteq7.0.0.1
ibm:rational_clearquestibm rational clearquesteq7.0.0.2
ibm:rational_clearquestibm rational clearquesteq7.0.1
ibm:rational_clearquestibm rational clearquesteq7.0.1.1
ibm:rational_clearquestibm rational clearquesteq7.0.1.2

CPE	Name	Operator	Version
ibm:rational_clearquest	ibm rational clearquest	le	7.0.0.3
ibm:rational_clearquest	ibm rational clearquest	eq	7.0.0.0
ibm:rational_clearquest	ibm rational clearquest	eq	7.0.0.1
ibm:rational_clearquest	ibm rational clearquest	eq	7.0.0.2
ibm:rational_clearquest	ibm rational clearquest	eq	7.0.1
ibm:rational_clearquest	ibm rational clearquest	eq	7.0.1.1
ibm:rational_clearquest	ibm rational clearquest	eq	7.0.1.2

References

secunia.com/advisories/32847

www-01.ibm.com/support/docview.wss?uid=swg1PK65908

exchange.xforce.ibmcloud.com/vulnerabilities/46995

4.6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

5.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.3%

JSON

Related for CVE-2008-5328

nvd1 cvelist1 prion1