CVE-2008-1287

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-03-11 · updated 2026-06-16
Weakness: CWE-16

Description

IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames.

Affected products

IBM Rational ClearQuest: 7.0.0.2, 7.0.1.1

References

http://secunia.com/advisories/29280
http://www-1.ibm.com/support/docview.wss?uid=swg1PK55561
http://www.securityfocus.com/bid/28132
http://www.securitytracker.com/id?1019566
http://www.vupen.com/english/advisories/2008/0804/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41042
http://secunia.com/advisories/29280
http://www-1.ibm.com/support/docview.wss?uid=swg1PK55561
http://www.securityfocus.com/bid/28132
http://www.securitytracker.com/id?1019566
http://www.vupen.com/english/advisories/2008/0804/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41042

Get alerted when CVE-2008-1287 or the next vulnerability affects your stack