CVE-2008-5327

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-12-05 · updated 2026-06-16
Weakness: CWE-255

Description

The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7 before 7.1 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object tree.

Affected products

IBM Rational ClearQuest: 7.0, 7.0.0.0, 7.0.0.1, 7.0.0.2, 7.0.0.3, 7.0.1 (+3)

References

http://secunia.com/advisories/32847
http://www-01.ibm.com/support/docview.wss?uid=swg1PK65908
https://exchange.xforce.ibmcloud.com/vulnerabilities/46995
http://secunia.com/advisories/32847
http://www-01.ibm.com/support/docview.wss?uid=swg1PK65908
https://exchange.xforce.ibmcloud.com/vulnerabilities/46995

Get alerted when CVE-2008-5327 or the next vulnerability affects your stack