VulnerabilityModified
CVE-2008-5326
The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain (1) user and (2) database passwords by using a password revealer utility on a field containing a series of…
MEDIUM 4.4EPSS 0.28%
Does this matter?
Lower severity and a low EPSS score (0.28%). Track it; it rarely justifies an emergency change on its own.
Description
The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain (1) user and (2) database passwords by using a password revealer utility on a field containing a series of asterisks.
- CVSS 2.0
- 4.4 MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 0.28% probability · 20th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-255
- Affected
- ibm/rational clearquest
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/32847Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK30938Patch, Vendor Advisory
- http://www.securityfocus.com/bid/32577
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46994
- http://secunia.com/advisories/32847Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK30938Patch, Vendor Advisory
- http://www.securityfocus.com/bid/32577
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46994
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.