VulnerabilityModified
CVE-2008-1288
IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 might allow local or remote attackers to obtain sensitive information about users by reading user cookies.
MEDIUM 5.0EPSS 1.44%
Does this matter?
Lower severity and a low EPSS score (1.44%). Track it; it rarely justifies an emergency change on its own.
Description
IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 might allow local or remote attackers to obtain sensitive information about users by reading user cookies.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 1.44% probability · 72th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- ibm/rational clearquest
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/29280Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1PK55753Patch
- http://www.securityfocus.com/bid/28133Patch
- http://www.securitytracker.com/id?1019567
- http://www.vupen.com/english/advisories/2008/0804/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41043
- http://secunia.com/advisories/29280Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1PK55753Patch
- http://www.securityfocus.com/bid/28133Patch
- http://www.securitytracker.com/id?1019567
- http://www.vupen.com/english/advisories/2008/0804/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41043
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.