VULNERABILITY INTELLIGENCE
CVE-2008-5328
CVSS score4.6 MEDIUM
EPSS probability1.44%
CISA KEVNot currently listed
Published2008-12-05
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:S/C:P/I:P/A:P
Description
The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object tree during an import process.