CVE-2019-4059
- EPSS 0.3%
- Published 15.02.2019 20:29:00
- Last modified 21.11.2024 04:43:06
IBM Rational ClearCase 1.0.0.0 GIT connector does not sufficiently protect the document database password. An attacker could obtain the password and gain unauthorized access to the document database. IBM X-Force ID: 156583.
CVE-2014-0931
- EPSS 0.77%
- Published 20.04.2018 21:29:00
- Last modified 21.11.2024 02:03:03
Multiple XML external entity (XXE) vulnerabilities in the (1) CCRC WAN Server / CM Server, (2) Perl CC/CQ integration trigger scripts, (3) CMAPI Java interface, (4) ClearCase remote client, and (5) CMI and OSLC-based ClearQuest integrations component...
CVE-2015-5039
- EPSS 0.13%
- Published 26.03.2018 18:29:00
- Last modified 21.11.2024 02:32:12
The Remote Client and change management integrations in IBM Rational ClearCase 7.1.x, 8.0.0.x before 8.0.0.18, and 8.0.1.x before 8.0.1.11 do not properly validate hostnames in X.509 certificates from SSL servers, which allows remote attackers to spo...
CVE-2014-6221
- EPSS 0.63%
- Published 06.04.2015 00:59:00
- Last modified 12.04.2025 10:46:40
The MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7 does not properly generate random numbers, which makes it easier for remote attackers to defeat ...
CVE-2014-6134
- EPSS 0.12%
- Published 25.03.2015 01:59:03
- Last modified 12.04.2025 10:46:40
IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation Manager before 1.8.2 is used, retains cleartext server passwords in process memory throughout the installation procedure, which might allow local users to obtain...
- EPSS 0.26%
- Published 23.09.2014 21:55:04
- Last modified 12.04.2025 10:46:40
IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not properly implement the Local Access Only protection mechanism, which allows remote attackers to bypass authentication and read files via the Help Se...
- EPSS 0.21%
- Published 23.09.2014 21:55:04
- Last modified 12.04.2025 10:46:40
The OSLC integration feature in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 provides different error messages for failed login attempts depending on whether the username exists, wh...
- EPSS 0.57%
- Published 23.09.2014 21:55:04
- Last modified 12.04.2025 10:46:40
IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, a...
- EPSS 0.21%
- Published 23.09.2014 21:55:04
- Last modified 12.04.2025 10:46:40
The Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cook...
- EPSS 0.22%
- Published 23.09.2014 20:55:02
- Last modified 12.04.2025 10:46:40
The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote attackers to obtain ac...