Lucene search

K
nvd[email protected]NVD:CVE-2008-5326
HistoryDec 05, 2008 - 12:30 a.m.

CVE-2008-5326

2008-12-0500:30:00
CWE-255
web.nvd.nist.gov
3

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.1

Confidence

Low

EPSS

0

Percentile

5.1%

The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain (1) user and (2) database passwords by using a password revealer utility on a field containing a series of asterisks.

Affected configurations

Nvd
Node
microsoftwindows
AND
ibmrational_clearquestMatch7.0.0.0
OR
ibmrational_clearquestMatch7.0.0.1
OR
ibmrational_clearquestMatch7.0.0.2
OR
ibmrational_clearquestMatch7.0.0.3
OR
ibmrational_clearquestMatch7.0.1
OR
ibmrational_clearquestMatch7.0.1.1
OR
ibmrational_clearquestMatch7.0.1.2
VendorProductVersionCPE
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
ibmrational_clearquest7.0.0.0cpe:2.3:a:ibm:rational_clearquest:7.0.0.0:*:*:*:*:*:*:*
ibmrational_clearquest7.0.0.1cpe:2.3:a:ibm:rational_clearquest:7.0.0.1:*:*:*:*:*:*:*
ibmrational_clearquest7.0.0.2cpe:2.3:a:ibm:rational_clearquest:7.0.0.2:*:*:*:*:*:*:*
ibmrational_clearquest7.0.0.3cpe:2.3:a:ibm:rational_clearquest:7.0.0.3:*:*:*:*:*:*:*
ibmrational_clearquest7.0.1cpe:2.3:a:ibm:rational_clearquest:7.0.1:*:*:*:*:*:*:*
ibmrational_clearquest7.0.1.1cpe:2.3:a:ibm:rational_clearquest:7.0.1.1:*:*:*:*:*:*:*
ibmrational_clearquest7.0.1.2cpe:2.3:a:ibm:rational_clearquest:7.0.1.2:*:*:*:*:*:*:*

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.1

Confidence

Low

EPSS

0

Percentile

5.1%

Related for NVD:CVE-2008-5326