CVE-2008-1288

Published: Mar 11, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 might allow local or remote attackers to obtain sensitive information about users by reading user cookies.

Affected (2)

Products: Ibm: Rational Clearquest

Ibm

1 product

Rational Clearquest

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Clearquest	Version 7.0.0.2
Ibm Rational Clearquest	Version 7.0.1.1

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

http://secunia.com/advisories/29280

Source: cve@mitre.org

Vendor Advisory

http://www-1.ibm.com/support/docview.wss?uid=swg1PK55753

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/28133

Source: cve@mitre.org

Patch

http://www.securitytracker.com/id?1019567

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0804/references

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/41043

Source: cve@mitre.org

http://secunia.com/advisories/29280