CVSS: 5.0EPSS: 1%CPEs: 2EXPL: 0CVE-2008-1287
https://notcve.org/view.php?id=CVE-2008-1287
IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames. IBM Rational ClearQuest versiones 7.0.1.1.1 y 7.0.0.0.2, genera diferentes mensajes de error dependiendo de si el nombre de usuario es válido o no válido, lo que permite a los atacantes remotos enumerar los nombres de usuario. • http://secunia.com/advisories/29280 http://www-1.ibm.com/support/docview.wss?uid=swg1PK55561 http://www.securityfocus.com/bid/28132 http://www.securitytracker.com/id?1019566 http://www.vupen.com/english/advisories/2008/0804/references https://exchange.xforce.ibmcloud.com/vulnerabilities/41042 • CWE-16: Configuration •
CVSS: 5.0EPSS: 0%CPEs: 2EXPL: 0CVE-2008-1288
https://notcve.org/view.php?id=CVE-2008-1288
IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 might allow local or remote attackers to obtain sensitive information about users by reading user cookies. IBM Rational ClearQuest 7.0.1.1 y 7.0.0.2 podrían permitir a atacantes locales o remotos obtener información sensible sobre usuarios mediante la lectura de las cookies de los usuarios. • http://secunia.com/advisories/29280 http://www-1.ibm.com/support/docview.wss?uid=swg1PK55753 http://www.securityfocus.com/bid/28133 http://www.securitytracker.com/id?1019567 http://www.vupen.com/english/advisories/2008/0804/references https://exchange.xforce.ibmcloud.com/vulnerabilities/41043 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.5EPSS: 0%CPEs: 13EXPL: 0CVE-2007-5090
https://notcve.org/view.php?id=CVE-2007-5090
Unspecified vulnerability in IBM Rational ClearQuest (CQ), when a Microsoft SQL Server or an IBM DB2 database is used, allows attackers to corrupt data via unspecified vectors. Vulnerabilidad sin especificar en el IBM Rational ClearQuest (CQ), cuando se utilizan las bases de datos Microsoft SQL Server o IBM DB2, permite a atacantes remotos corromper los datos a través de vectores sin especificar. • http://osvdb.org/40598 http://secunia.com/advisories/26899 http://www-1.ibm.com/support/docview.wss?uid=swg21268116 http://www.securityfocus.com/bid/25810 http://www.securitytracker.com/id?1018735 http://www.vupen.com/english/advisories/2007/3264 https://exchange.xforce.ibmcloud.com/vulnerabilities/36771 • CWE-264: Permissions, Privileges, and Access Controls •