CVE-2008-5326

IBM Rational ClearQuest <7.0.0.4, <7.0.1.3 - Info Disclosure

Title source: llm
STIX 2.1

Description

The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain (1) user and (2) database passwords by using a password revealer utility on a field containing a series of asterisks.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/46994
Patch, Vendor Advisory vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PK30938
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/32847
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/32577

Scores

EPSS 0.0028
EPSS Percentile 19.7%

Details

CWE
CWE-255
Status published
Products (7)
ibm/rational_clearquest 7.0.0.0
ibm/rational_clearquest 7.0.0.1
ibm/rational_clearquest 7.0.0.2
ibm/rational_clearquest 7.0.0.3
ibm/rational_clearquest 7.0.1
ibm/rational_clearquest 7.0.1.1
ibm/rational_clearquest 7.0.1.2
Published Dec 05, 2008
Tracked Since Feb 18, 2026