Lucene search

[email protected]CVE-2008-5330

HistoryDec 05, 2008 - 12:30 a.m.

CVE-2008-5330

2008-12-0500:30:00

CWE-79

[email protected]

web.nvd.nist.gov

ibm rational clearcase

xss

vulnerabilities

web interface

clearcase rwp server

nvd

cve-2008-5330

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.1%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the web interface in ClearCase RWP server in IBM Rational ClearCase 7.0.0 before 7.0.0.4, and 7.0.1.1-RATL-RCC-IFIX02 and possibly other 7.0.1 versions before 7.0.1.3, allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO of a URI associated with a VOB page.

Affected configurations

NVD

Node

ibmrational_clearquestMatch7.0.0.0

ibmrational_clearquestMatch7.0.0.1

ibmrational_clearquestMatch7.0.0.2

ibmrational_clearquestMatch7.0.0.3

ibmrational_clearquestMatch7.0.1

ibmrational_clearquestMatch7.0.1.1

ibmrational_clearquestMatch7.0.1.2

CPENameOperatorVersion
ibm:rational_clearquestibm rational clearquesteq7.0.0.0
ibm:rational_clearquestibm rational clearquesteq7.0.0.1
ibm:rational_clearquestibm rational clearquesteq7.0.0.2
ibm:rational_clearquestibm rational clearquesteq7.0.0.3
ibm:rational_clearquestibm rational clearquesteq7.0.1
ibm:rational_clearquestibm rational clearquesteq7.0.1.1
ibm:rational_clearquestibm rational clearquesteq7.0.1.2

CPE	Name	Operator	Version
ibm:rational_clearquest	ibm rational clearquest	eq	7.0.0.0
ibm:rational_clearquest	ibm rational clearquest	eq	7.0.0.1
ibm:rational_clearquest	ibm rational clearquest	eq	7.0.0.2
ibm:rational_clearquest	ibm rational clearquest	eq	7.0.0.3
ibm:rational_clearquest	ibm rational clearquest	eq	7.0.1
ibm:rational_clearquest	ibm rational clearquest	eq	7.0.1.1
ibm:rational_clearquest	ibm rational clearquest	eq	7.0.1.2

References

secunia.com/advisories/32957

securitytracker.com/id?1021295

www-01.ibm.com/support/docview.wss?uid=swg1PK70972

www.securityfocus.com/bid/32574

www.vupen.com/english/advisories/2008/3330

exchange.xforce.ibmcloud.com/vulnerabilities/46983

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.1%

JSON

Related for CVE-2008-5330

prion1 nvd1 cvelist1