Lucene search

IbmCVE-2015-5039

HistoryMar 26, 2018 - 6:29 p.m.

CVE-2015-5039

2018-03-2618:29:00

CWE-310

ibm

web.nvd.nist.gov

ibm

rational clearcase

ssl

server

spoofing

vulnerability

x.509

certificate

validation

remote attack

network traffic

ibm x-force

cve-2015-5039

nvd

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

44.9%

JSON

The Remote Client and change management integrations in IBM Rational ClearCase 7.1.x, 8.0.0.x before 8.0.0.18, and 8.0.1.x before 8.0.1.11 do not properly validate hostnames in X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information or modify network traffic via a crafted certificate. IBM X-Force ID: 106715.

Affected configurations

Nvd

Node

ibmrational_clearcaseRange7.1–7.1.2.16

ibmrational_clearcaseRange8.0–8.0.0.17

ibmrational_clearcaseRange8.0.1–8.0.1.10

VendorProductVersionCPE
ibmrational_clearcase*cpe:2.3:a:ibm:rational_clearcase:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	rational_clearcase	*	cpe:2.3:a:ibm:rational_clearcase::::::::

References

www-01.ibm.com/support/docview.wss?uid=swg21976566

exchange.xforce.ibmcloud.com/vulnerabilities/106715

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

44.9%

JSON

Related for CVE-2015-5039