Vulnerability Details CVE-2009-4357
CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow attackers to discover the passwords for user accounts via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 55.8%
CVSS Severity
CVSS v2 Score 5.0
References
- http://secunia.com/advisories/37811
- http://securitytracker.com/id?1023370
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK86377
- http://www.securityfocus.com/bid/37385
- http://www.vupen.com/english/advisories/2009/3580
- http://secunia.com/advisories/37811
- http://securitytracker.com/id?1023370
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK86377
- http://www.securityfocus.com/bid/37385
- http://www.vupen.com/english/advisories/2009/3580
Products affected by CVE-2009-4357
-
cpe:2.3:a:ibm:rational_clearcase:2.1.1063
-
cpe:2.3:a:ibm:rational_clearcase:7.0.0.1
-
cpe:2.3:a:ibm:rational_clearcase:7.0.0.2
-
cpe:2.3:a:ibm:rational_clearcase:7.0.0.4
-
cpe:2.3:a:ibm:rational_clearcase:7.0.1.1
-
cpe:2.3:a:ibm:rational_clearcase:7.0.1.3
-
cpe:2.3:a:ibm:rational_clearcase:7.1
-
cpe:2.3:a:ibm:rational_clearquest:2007
-
cpe:2.3:a:ibm:rational_clearquest:2008
-
cpe:2.3:a:ibm:rational_clearquest:5.00
-
cpe:2.3:a:ibm:rational_clearquest:5.20
-
cpe:2.3:a:ibm:rational_clearquest:6.00
-
cpe:2.3:a:ibm:rational_clearquest:6.10
-
cpe:2.3:a:ibm:rational_clearquest:6.12
-
cpe:2.3:a:ibm:rational_clearquest:6.13
-
cpe:2.3:a:ibm:rational_clearquest:6.14
-
cpe:2.3:a:ibm:rational_clearquest:6.15
-
cpe:2.3:a:ibm:rational_clearquest:6.16
-
cpe:2.3:a:ibm:rational_clearquest:7.0
-
cpe:2.3:a:ibm:rational_clearquest:7.0.0.1
-
cpe:2.3:a:ibm:rational_clearquest:7.0.1
-
cpe:2.3:a:ibm:rational_clearquest:7.0.1.0
-
cpe:2.3:a:ibm:rational_clearquest:7.0.1.1
-
cpe:2.3:a:ibm:rational_clearquest:7.0.1.3
-
cpe:2.3:a:ibm:rational_clearquest:7.0.2