// For flags

CVE-2008-5328

 

Severity Score

4.6
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object tree during an import process.

La herramienta ClearQuest Maintenance en IBM Rational ClearQuest anterior a la v7 almacena la contraseña de la base de datos en texto claro en un objeto en un perfil de conexión de ClearQuest o un fichero de exportación, que permitiría a usuarios remotos autenticados obtener información sensible localizando el objeto contraseña en el árbol de objetos durante un proceso de importación.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
High
Authentication
Single
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2008-12-04 CVE Reserved
  • 2008-12-05 CVE Published
  • 2023-03-07 EPSS Updated
  • 2024-08-07 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-310: Cryptographic Issues
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Ibm
Search vendor "Ibm"
Rational Clearquest
Search vendor "Ibm" for product "Rational Clearquest"
<= 7.0.0.3
Search vendor "Ibm" for product "Rational Clearquest" and version " <= 7.0.0.3"
-
Affected
Ibm
Search vendor "Ibm"
Rational Clearquest
Search vendor "Ibm" for product "Rational Clearquest"
7.0.0.0
Search vendor "Ibm" for product "Rational Clearquest" and version "7.0.0.0"
-
Affected
Ibm
Search vendor "Ibm"
Rational Clearquest
Search vendor "Ibm" for product "Rational Clearquest"
7.0.0.1
Search vendor "Ibm" for product "Rational Clearquest" and version "7.0.0.1"
-
Affected
Ibm
Search vendor "Ibm"
Rational Clearquest
Search vendor "Ibm" for product "Rational Clearquest"
7.0.0.2
Search vendor "Ibm" for product "Rational Clearquest" and version "7.0.0.2"
-
Affected
Ibm
Search vendor "Ibm"
Rational Clearquest
Search vendor "Ibm" for product "Rational Clearquest"
7.0.1
Search vendor "Ibm" for product "Rational Clearquest" and version "7.0.1"
-
Affected
Ibm
Search vendor "Ibm"
Rational Clearquest
Search vendor "Ibm" for product "Rational Clearquest"
7.0.1.1
Search vendor "Ibm" for product "Rational Clearquest" and version "7.0.1.1"
-
Affected
Ibm
Search vendor "Ibm"
Rational Clearquest
Search vendor "Ibm" for product "Rational Clearquest"
7.0.1.2
Search vendor "Ibm" for product "Rational Clearquest" and version "7.0.1.2"
-
Affected