Design/Logic Flaw

2008-12-0500:30:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.2%

JSON

The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7 before 7.1 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object tree.

CPENameOperatorVersion
rational_clearquesteq7.0.1.1
rational_clearquesteq7.0.0.1
rational_clearquesteq7.0.0.2
rational_clearquesteq7.0
rational_clearquesteq7.0.0.0
rational_clearquesteq7.0.0.3
rational_clearquesteq7.0.1
rational_clearquesteq7.0.1.2
rational_clearquesteq7.0.2

Name	Operator	Version
rational_clearquest	eq	7.0.1.1
rational_clearquest	eq	7.0.0.1
rational_clearquest	eq	7.0.0.2
rational_clearquest	eq	7.0
rational_clearquest	eq	7.0.0.0
rational_clearquest	eq	7.0.0.3
rational_clearquest	eq	7.0.1
rational_clearquest	eq	7.0.1.2
rational_clearquest	eq	7.0.2