CVEvulnerability
CVE-2008-5326
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-12-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-255
Description
The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain (1) user and (2) database passwords by using a password revealer utility on a field containing a series of asterisks.
Affected configurations
• ibm rational clearquest 7.0.0.0
• ibm rational clearquest 7.0.0.1
• ibm rational clearquest 7.0.0.2
• ibm rational clearquest 7.0.0.3
• ibm rational clearquest 7.0.1
• ibm rational clearquest 7.0.1.1
• ibm rational clearquest 7.0.1.2
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/32847 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK30938 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/32577 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46994 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/32847 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK30938 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/32577 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46994 exchange.xforce.ibmcloud.com