CVE-2012-2165 — Sensitive Information Exposure in IBM Rational Clearquest

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
3.5LOWNVD
EPSS
0.2%
top 64.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Rational Clearquest
Timeline
PublishedAug 17
Latest updateMay 17

Description

IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3, when ClearQuest Authentication is enabled, allows remote authenticated users to read password hashes via a user query.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 6.8 | Impact: 2.9

Affected Packages1 packages

▶NVDibm/rational_clearquest18 versions+17

🔴Vulnerability Details

2
GHSA
GHSA-566w-735r-v996: IBM Rational ClearQuest 7↗2022-05-17
▶
CVEList
CVE-2012-2165: IBM Rational ClearQuest 7↗2012-08-17
▶
CVE-2012-2165 — Sensitive Information Exposure in IBM | cvebase