CVE-2008-5328

The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object tree during an import process.

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg1PK65908
http://secunia.com/advisories/32847	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/46995

Configuration 1

cpe:2.3:a:ibm:rational_clearquest:7.0.1.1:*:*:*:*:*:*:* cpe:2.3:a:ibm:rational_clearquest:7.0.0.1:*:*:*:*:*:*:* cpe:2.3:a:ibm:rational_clearquest:7.0.0.2:*:*:*:*:*:*:* cpe:2.3:a:ibm:rational_clearquest:7.0.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:rational_clearquest:7.0.1:*:*:*:*:*:*:* cpe:2.3:a:ibm:rational_clearquest:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:rational_clearquest:7.0.1.2:*:*:*:*:*:*:*

---

Published : 2008-12-05 12:30

Updated : 2017-08-08 01:33

---

NVD link : CVE-2008-5328

Mitre link : CVE-2008-5328

No products.

CWE-310