Lucene search
HistorySep 23, 2014 - 8:55 p.m.
CVE-2014-3101
ibm
rational clearquest
vulnerability
login form
web component
brute-force attack
nvd
cve-2014-3101
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.6 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.2%
The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote attackers to obtain access via a brute-force attack.
Affected configurations
Node
ibmrational_clearcaseMatch7.1
ORibmrational_clearcaseMatch7.1.0.1
ORibmrational_clearcaseMatch7.1.0.2
ORibmrational_clearcaseMatch7.1.1
ORibmrational_clearcaseMatch7.1.1.1
ORibmrational_clearcaseMatch7.1.1.2
ORibmrational_clearcaseMatch7.1.1.3
ORibmrational_clearcaseMatch7.1.1.4
ORibmrational_clearcaseMatch7.1.1.5
ORibmrational_clearcaseMatch7.1.1.6
ORibmrational_clearcaseMatch7.1.1.7
ORibmrational_clearcaseMatch7.1.1.8
ORibmrational_clearcaseMatch7.1.1.9
ORibmrational_clearcaseMatch7.1.2
ORibmrational_clearcaseMatch7.1.2.1
ORibmrational_clearcaseMatch7.1.2.2
ORibmrational_clearcaseMatch7.1.2.3
ORibmrational_clearcaseMatch7.1.2.4
ORibmrational_clearcaseMatch7.1.2.5
ORibmrational_clearcaseMatch7.1.2.6
ORibmrational_clearcaseMatch7.1.2.7
ORibmrational_clearcaseMatch7.1.2.9
ORibmrational_clearcaseMatch7.1.2.10
ORibmrational_clearcaseMatch7.1.2.11
ORibmrational_clearcaseMatch7.1.2.12
ORibmrational_clearcaseMatch7.1.2.13
ORibmrational_clearcaseMatch7.1.2.14
ORibmrational_clearcaseMatch8.0
ORibmrational_clearcaseMatch8.0.0.1
ORibmrational_clearcaseMatch8.0.0.2
ORibmrational_clearcaseMatch8.0.0.3
ORibmrational_clearcaseMatch8.0.0.4
ORibmrational_clearcaseMatch8.0.0.5
ORibmrational_clearcaseMatch8.0.0.6
ORibmrational_clearcaseMatch8.0.0.7
ORibmrational_clearcaseMatch8.0.0.8
ORibmrational_clearcaseMatch8.0.0.9
ORibmrational_clearcaseMatch8.0.0.10
ORibmrational_clearcaseMatch8.0.0.11
ORibmrational_clearcaseMatch8.0.1
ORibmrational_clearcaseMatch8.0.1.1
ORibmrational_clearcaseMatch8.0.1.2
ORibmrational_clearcaseMatch8.0.1.3
ORibmrational_clearcaseMatch8.0.1.4
Related
prion
prion
Authentication flaw
2014-09-23 20:55:00
ibm
ibm
Security Bulletin: Brute-force attack in ClearQuest Web (CVE-2014-3101)
2018-09-29 18:04:03
nvd
nvd
CVE-2014-3101
2014-09-23 20:55:02
cvelist
cvelist
CVE-2014-3101
2014-09-23 20:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.6 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.2%
Related for CVE-2014-3101