CVE-2008-5326

Severity: medium (CVSS 4.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-12-05 · updated 2026-06-16
Weakness: CWE-255

Description

The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain (1) user and (2) database passwords by using a password revealer utility on a field containing a series of asterisks.

Affected products

IBM Rational ClearQuest: 7.0.0.0, 7.0.0.1, 7.0.0.2, 7.0.0.3, 7.0.1, 7.0.1.1 (+1)

References

http://secunia.com/advisories/32847
http://www-01.ibm.com/support/docview.wss?uid=swg1PK30938
http://www.securityfocus.com/bid/32577
https://exchange.xforce.ibmcloud.com/vulnerabilities/46994
http://secunia.com/advisories/32847
http://www-01.ibm.com/support/docview.wss?uid=swg1PK30938
http://www.securityfocus.com/bid/32577
https://exchange.xforce.ibmcloud.com/vulnerabilities/46994

Get alerted when CVE-2008-5326 or the next vulnerability affects your stack