CVE-2008-5329

IBM Rational ClearQuest MultiSite < 7.0.0.3 - Database Redirection via JTLRMIREGISTRYSERVERS Property

Title source: manual
STIX 2.1

Description

ClearQuest Web in IBM Rational ClearQuest MultiSite before 7.1 allows remote servers to direct a client's submissions and changes to an arbitrary database by specifying multiple comma-separated server identifiers on the JTLRMIREGISTRYSERVERS line in a jtl.properties file.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/46993
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/32847
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PK38745

Scores

EPSS 0.0159
EPSS Percentile 73.2%

Details

Status published
Products (7)
ibm/rational_clearquest 7.0.0.0
ibm/rational_clearquest 7.0.0.1
ibm/rational_clearquest 7.0.0.2
ibm/rational_clearquest 7.0.1
ibm/rational_clearquest 7.0.1.1
ibm/rational_clearquest 7.0.1.2
ibm/rational_clearquest < 7.0.0.3
Published Dec 05, 2008
Tracked Since Feb 18, 2026