medium4.4
CVE-2008-5326
The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain (1) user and (…
Impact
The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain (1) user and (2) database passwords by using a password revealer utility on a field containing a series of asterisks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Rational Clearquest | Versions 7.0.0.0, 7.0.0.1, 7.0.0.2, 7.0.0.3, 7.0.1, 7.0.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/32847
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK30938
- http://www.securityfocus.com/bid/32577
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46994
- http://secunia.com/advisories/32847
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK30938
- http://www.securityfocus.com/bid/32577
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46994