Lucene search

MitreCVE-2008-3550

HistoryAug 08, 2008 - 7:41 p.m.

CVE-2008-3550

2008-08-0819:41:00

CWE-200

mitre

web.nvd.nist.gov

ibm rational clearquest

cqweb

remote attackers

sensitive information

xss

vulnerability.

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

5.6

Confidence

High

EPSS

0.003

Percentile

68.3%

JSON

The CQWeb login page in IBM Rational ClearQuest 7.0.1 allows remote attackers to obtain potentially sensitive information (page source code) via a combination of ?script? and ?/script? sequences in the id field, possibly related to a cross-site scripting (XSS) vulnerability.

Affected configurations

Nvd

Node

ibmrational_clearquestMatch7.0.1

VendorProductVersionCPE
ibmrational_clearquest7.0.1cpe:2.3:a:ibm:rational_clearquest:7.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	rational_clearquest	7.0.1	cpe:2.3:a:ibm:rational_clearquest:7.0.1:::::::*

References

www-1.ibm.com/support/docview.wss?uid=swg1PK68332

www.securitytracker.com/id?1020642

www.vupen.com/english/advisories/2008/2317

exchange.xforce.ibmcloud.com/vulnerabilities/44254

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

5.6

Confidence

High

EPSS

0.003

Percentile

68.3%

JSON

Related for CVE-2008-3550