CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2019-4059
https://notcve.org/view.php?id=CVE-2019-4059
15 Feb 2019 — IBM Rational ClearCase 1.0.0.0 GIT connector does not sufficiently protect the document database password. An attacker could obtain the password and gain unauthorized access to the document database. IBM X-Force ID: 156583. El conector GIT de IBM Rational ClearCase 1.0.0.0 no protege lo suficiente la contraseña de la base de datos de documentos. Un atacante podría obtener la contraseña y acceso no autorizado a la base de datos de documentos. • https://exchange.xforce.ibmcloud.com/vulnerabilities/156583 • CWE-522: Insufficiently Protected Credentials •
CVSS: 9.1EPSS: 0%CPEs: 5EXPL: 0CVE-2014-0931
https://notcve.org/view.php?id=CVE-2014-0931
20 Apr 2018 — Multiple XML external entity (XXE) vulnerabilities in the (1) CCRC WAN Server / CM Server, (2) Perl CC/CQ integration trigger scripts, (3) CMAPI Java interface, (4) ClearCase remote client, and (5) CMI and OSLC-based ClearQuest integrations components in IBM Rational ClearCase 7.1.0.x, 7.1.1.x, 7.1.2 through 7.1.2.13, 8.0 through 8.0.0.10, and 8.0.1 through 8.0.1.3 allow remote attackers to cause a denial of service or access other servers via crafted XML data. IBM X-Force ID: 92263. Múltiples vulnerabilida... • http://www-01.ibm.com/support/docview.wss?uid=swg21668868 • CWE-611: Improper Restriction of XML External Entity Reference •
CVSS: 7.4EPSS: 0%CPEs: 3EXPL: 0CVE-2015-5039
https://notcve.org/view.php?id=CVE-2015-5039
26 Mar 2018 — The Remote Client and change management integrations in IBM Rational ClearCase 7.1.x, 8.0.0.x before 8.0.0.18, and 8.0.1.x before 8.0.1.11 do not properly validate hostnames in X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information or modify network traffic via a crafted certificate. IBM X-Force ID: 106715. El cliente remoto y las integraciones de gestión de cambio en las versiones 7.1.x y 8.0.0.x de IBM Rational ClearCase anteriores a la 8.0.0.1... • http://www-01.ibm.com/support/docview.wss?uid=swg21976566 • CWE-310: Cryptographic Issues •
CVSS: 9.4EPSS: 0%CPEs: 37EXPL: 0CVE-2014-6221
https://notcve.org/view.php?id=CVE-2014-6221
06 Apr 2015 — The MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7 does not properly generate random numbers, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors. La implementación de la interfaz MSCAPI/MSCNG en GSKit en IBM Rational ClearCase 7.1.2.x anterior a 7.1.2.17, 8.0.0.x anterior a 8.0.0.14, y 8.0.1.x anterior a 8.0.1.7 no genera correctamente los númer... • http://www-01.ibm.com/support/docview.wss?uid=swg21698893 • CWE-310: Cryptographic Issues •
CVSS: 5.5EPSS: 0%CPEs: 22EXPL: 0CVE-2014-6134
https://notcve.org/view.php?id=CVE-2014-6134
25 Mar 2015 — IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation Manager before 1.8.2 is used, retains cleartext server passwords in process memory throughout the installation procedure, which might allow local users to obtain sensitive information by leveraging access to the installation account. IBM Rational ClearCase 8.0.0 anterior a 8.0.0.14 y 8.0.1 anterior a 8.0.1.7, cuando se utiliza Installation Manager anterior a 1.8.2, retiene las contraseñas del servidor en texto plano en ... • http://www-01.ibm.com/support/docview.wss?uid=swg21688450 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.0EPSS: 0%CPEs: 44EXPL: 0CVE-2014-3103
https://notcve.org/view.php?id=CVE-2014-3103
23 Sep 2014 — The Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. El componente web en IBM Rational ClearQuest 7.1 anterior a 7.1.2.15, 8.0.0 anterior a 8.0.0.12, y 8.0.1 anterior a 8.0.1.5 no configura el indicador de seguridad para la cookie de la sesión en una sesi... • http://www-01.ibm.com/support/docview.wss?uid=swg21682947 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.5EPSS: 0%CPEs: 44EXPL: 0CVE-2014-3104
https://notcve.org/view.php?id=CVE-2014-3104
23 Sep 2014 — IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564. IBM Rational ClearQuest 7.1 anterior a 7.1.2.15, 8.0.0 anterior a 8.0.0.12, y 8.0.1 anterior a 8.0.1.5 permite a atacantes remotos causar una denegación de servicio (consumo de memoria) a través de un documento XML manipulado que... • http://www-01.ibm.com/support/docview.wss?uid=swg21682942 • CWE-399: Resource Management Errors •
CVSS: 5.3EPSS: 0%CPEs: 44EXPL: 0CVE-2014-3105
https://notcve.org/view.php?id=CVE-2014-3105
23 Sep 2014 — The OSLC integration feature in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 provides different error messages for failed login attempts depending on whether the username exists, which allows remote attackers to enumerate account names via a series of requests. La función de integración OSLC en el componente web en IBM Rational ClearQuest 7.1 anterior a 7.1.2.15, 8.0.0 anterior a 8.0.0.12, y 8.0.1 anterior a 8.0.1.5 proporciona mensajes de... • http://www-01.ibm.com/support/docview.wss?uid=swg21682949 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.5EPSS: 0%CPEs: 44EXPL: 0CVE-2014-3106
https://notcve.org/view.php?id=CVE-2014-3106
23 Sep 2014 — IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not properly implement the Local Access Only protection mechanism, which allows remote attackers to bypass authentication and read files via the Help Server Administration feature. IBM Rational ClearQuest 7.1 anterior a 7.1.2.15, 8.0.0 anterior a 8.0.0.12, y 8.0.1 anterior a 8.0.1.5 no implementa debidamente el mecanismo de protección de Local Access Only, lo que permite a atacantes remotos evadir la autenticac... • http://www-01.ibm.com/support/docview.wss?uid=swg21682950 • CWE-287: Improper Authentication •
CVSS: 7.5EPSS: 0%CPEs: 45EXPL: 0CVE-2014-3090
https://notcve.org/view.php?id=CVE-2014-3090
23 Sep 2014 — IBM Rational ClearCase 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564. IBM Rational ClearCase 7.1 anterior a 7.1.2.15, 8.0.0 anterior a 8.0.0.12, y 8.0.1 anterior a 8.0.1.5 permite a atacantes remotos causar una denegación de servicio (consumo de memoria) a través de un documento XML manipulado que t... • http://www-01.ibm.com/support/docview.wss?uid=swg21677285 •