NVD

Id
5105  
Name
CVE-2008-5327  
Description
The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7 before 7.1 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object tree.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-12-04  
Modified Date
2008-12-05  
Seq
2008-5327  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
31899 5105 CVE-2008-5327 PK65908  View
31900 5105 CVE-2008-5327 clearquest-maintenance-info-disclosure(46995)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47083 JVNDB-2008-002393 IBM Rational ClearQuest の ClearQuest Maintenance Tool における重要な情報を取得される脆弱性 IBM Rational ClearQuest の ClearQuest Maintenance Tool には、データベースのパスワードを、ClearQuest connection profile、またはエクスポートしたファイルにオブジェクトとして平文で保存するため、重要な情報を取得される脆弱性が存在します。 CVE-2008-5327 35440 CVE-2008-5327 5105 6.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002393.html 2008-12-05 2009-07-08 View