Description
The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object tree during an import process.
References (3)
Core 3
Core References
Various Sources vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PK65908
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/32847
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/46995
Scores
EPSS
0.0144
EPSS Percentile
70.4%
Details
CWE
CWE-310
Status
published
Products (7)
ibm/rational_clearquest
7.0.0.0
ibm/rational_clearquest
7.0.0.1
ibm/rational_clearquest
7.0.0.2
ibm/rational_clearquest
7.0.1
ibm/rational_clearquest
7.0.1.1
ibm/rational_clearquest
7.0.1.2
ibm/rational_clearquest
< 7.0.0.3
Published
Dec 05, 2008
Tracked Since
Feb 18, 2026