CVE-2008-5326 — IBM Rational Clearquest vulnerability

CWE-2553 documents3 sources
Severity
4.4MEDIUMNVD
EPSS
0.1%
top 79.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Rational Clearquest
Timeline
PublishedDec 5
Latest updateMay 17

Description

The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain (1) user and (2) database passwords by using a password revealer utility on a field containing a series of asterisks.

CVSS vector

AV:L/AC:M/C:P/I:P/A:PExploitability: 3.4 | Impact: 6.4

Affected Packages1 packages

▶NVDibm/rational_clearquest7 versions+6

Patches

Patch: www-01.ibm.com ↗Patch: www-01.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-3fc2-9v98-58qv: The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7↗2022-05-17
▶
CVEList
CVE-2008-5326: The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7↗2008-12-05
▶
CVE-2008-5326 — IBM Rational Clearquest vulnerability | cvebase