CVE-2008-5327
05.12.2008, 00:30
The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7 before 7.1 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object tree.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ibm | rational_clearquest | 7.0 |
| ibm | rational_clearquest | 7.0.0.0 |
| ibm | rational_clearquest | 7.0.0.1 |
| ibm | rational_clearquest | 7.0.0.2 |
| ibm | rational_clearquest | 7.0.0.3 |
| ibm | rational_clearquest | 7.0.1 |
| ibm | rational_clearquest | 7.0.1.1 |
| ibm | rational_clearquest | 7.0.1.2 |
| ibm | rational_clearquest | 7.0.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References