CVE-2009-4357
N/A
N/A
Summary
CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow attackers to discover the passwords for user accounts via unspecified vectors.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://securitytracker.com/id?1023370
- http://www.securityfocus.com/bid/37385
- http://secunia.com/advisories/37811
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK86377
- http://www.vupen.com/english/advisories/2009/3580
References
- http://securitytracker.com/id?1023370
- http://www.securityfocus.com/bid/37385
- http://secunia.com/advisories/37811
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK86377
- http://www.vupen.com/english/advisories/2009/3580
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.