CVE-2008-5326

The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain (1) user and (2) database passwords by using a password revealer utility on a field containing a series of asterisks.

🔗 References (8)

• cve@mitrehttp://secunia.com/advisories/32847
• cve@mitrehttp://www-01.ibm.com/support/docview.wss?uid=swg1PK30938
• cve@mitrehttp://www.securityfocus.com/bid/32577
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/46994
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/32847
• af854a3a-2127-422b-91ae-364da2661108http://www-01.ibm.com/support/docview.wss?uid=swg1PK30938
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/32577
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/46994