CVE-2009-4357 | BDVDB-2026-39692 Detail

Description#

CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow attackers to discover the passwords for user accounts via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securitytracker.com/id?1023370
http://www.securityfocus.com/bid/37385
http://secunia.com/advisories/37811
http://www-01.ibm.com/support/docview.wss?uid=swg1PK86377
http://www.vupen.com/english/advisories/2009/3580

Exploit#

No public exploit known

History#

Version 12009-12-18Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.