CVE-2008-3550 | BDVDB-2026-31920 Detail

Description#

The CQWeb login page in IBM Rational ClearQuest 7.0.1 allows remote attackers to obtain potentially sensitive information (page source code) via a combination of ?script? and ?/script? sequences in the id field, possibly related to a cross-site scripting (XSS) vulnerability.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-1.ibm.com/support/docview.wss?uid=swg1PK68332
https://exchange.xforce.ibmcloud.com/vulnerabilities/44254
http://www.securitytracker.com/id?1020642
http://www.vupen.com/english/advisories/2008/2317

Exploit#

No public exploit known

History#

Version 12008-08-08Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.