CVE-2008-5329

ClearQuest Web in IBM Rational ClearQuest MultiSite before 7.1 allows remote servers to direct a client's submissions and changes to an arbitrary database by specifying multiple comma-separated server identifiers on the JTLRMIREGISTRYSERVERS line in a jtl.properties file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 65%
VendorProductVersion
ibmrational_clearquest
𝑥
≤ 7.0.0.3
ibmrational_clearquest
7.0.0.0
ibmrational_clearquest
7.0.0.1
ibmrational_clearquest
7.0.0.2
ibmrational_clearquest
7.0.1
ibmrational_clearquest
7.0.1.1
ibmrational_clearquest
7.0.1.2
𝑥
= Vulnerable software versions
References
http://secunia.com/advisories/32847
http://www-01.ibm.com/support/docview.wss?uid=swg1PK38745
https://exchange.xforce.ibmcloud.com/vulnerabilities/46993
http://secunia.com/advisories/32847
http://www-01.ibm.com/support/docview.wss?uid=swg1PK38745
https://exchange.xforce.ibmcloud.com/vulnerabilities/46993