CVE-2015-5039 | BDVDB-2026-98307 Detail

Description#

The Remote Client and change management integrations in IBM Rational ClearCase 7.1.x, 8.0.0.x before 8.0.0.18, and 8.0.1.x before 8.0.1.11 do not properly validate hostnames in X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information or modify network traffic via a crafted certificate. IBM X-Force ID: 106715.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?uid=swg21976566
https://exchange.xforce.ibmcloud.com/vulnerabilities/106715

Exploit#

No public exploit known

History#

Version 12018-03-26Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.