VULNERABILITY INTELLIGENCE

CVE-2008-5327

CVSS score6.5 MEDIUM
EPSS probability1.10%
CISA KEVNot currently listed
Published2008-12-05
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7 before 7.1 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object tree.

Primary references