2 matches found
Design/Logic Flaw
CQWeb aka the web interface in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow attackers to discover the passwords for user accounts via unspecified vectors...
5CVSS6.8AI score0.01076EPSS
SaveExploits1References5Affected Software2
CVE-2009-4357
CQWeb aka the web interface in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow attackers to discover the passwords for user accounts via unspecified vectors...
6.4AI score0.01076EPSS
SaveExploits1References5
20