CVE-2015-4996 — Sensitive Information Exposure in IBM Rational Clearquest

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
5.1MEDIUMNVD
EPSS
0.0%
top 85.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Rational Clearquest
Timeline
PublishedJan 2
Latest updateMay 17

Description

IBM Rational ClearQuest 7.1.x and 8.0.0.x before 8.0.0.17 and 8.0.1.x before 8.0.1.10 allows local users to spoof database servers and discover credentials via unspecified vectors.

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 1.4 | Impact: 3.6

Affected Packages1 packages

▶NVDibm/rational_clearquest52 versions+51

🔴Vulnerability Details

2
GHSA
GHSA-v5c7-p27q-f4c6: IBM Rational ClearQuest 7↗2022-05-17
▶
CVEList
CVE-2015-4996: IBM Rational ClearQuest 7↗2016-01-02
▶
CVE-2015-4996 — Sensitive Information Exposure in IBM | cvebase