Vulnerability Database

289,871

Total vulnerabilities in the database

CVE-2008-5328

The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object tree during an import process.

  • Published: Dec 5, 2008
  • Updated: Apr 13, 2023
  • CVE: CVE-2008-5328
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.6
  • AV:N/AC:H/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
ibm / rational_clearquest 7.0.1.1 7.0.1.1.x
ibm / rational_clearquest 7.0.0.1 7.0.0.1.x
ibm / rational_clearquest 7.0.0.2 7.0.0.2.x
ibm / rational_clearquest 7.0.0.0 7.0.0.0.x
ibm / rational_clearquest 7.0.1 7.0.1.x
ibm / rational_clearquest - 7.0.0.3.x
ibm / rational_clearquest 7.0.1.2 7.0.1.2.x