cbcvebase.
CVE-2009-4357
published 2009-12-18

CVE-2009-4357: CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow…

PriorityP417medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.08%
61.3th percentile
CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow attackers to discover the passwords for user accounts via unspecified vectors.

Affected

24 ranges
VendorProductVersion rangeFixed in
ibmrational_clearcase<= 7.1—
ibmrational_clearcase——
ibmrational_clearcase——
ibmrational_clearcase——
ibmrational_clearcase——
ibmrational_clearcase——
ibmrational_clearquest——
ibmrational_clearquest——
ibmrational_clearquest——
ibmrational_clearquest——
ibmrational_clearquest——
ibmrational_clearquest——
ibmrational_clearquest——
ibmrational_clearquest——
ibmrational_clearquest——
ibmrational_clearquest——
ibmrational_clearquest——
ibmrational_clearquest——
ibmrational_clearquest——
ibmrational_clearquest——
ibmrational_clearquest——
ibmrational_clearquest——
ibmrational_clearquest——
ibmrational_clearquest——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.