CVE-2015-5039

Severity: high (CVSS 7.4 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-03-26 · updated 2026-06-17
Weakness: CWE-310

Description

The Remote Client and change management integrations in IBM Rational ClearCase 7.1.x, 8.0.0.x before 8.0.0.18, and 8.0.1.x before 8.0.1.11 do not properly validate hostnames in X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information or modify network traffic via a crafted certificate. IBM X-Force ID: 106715.

Affected products

IBM Rational ClearCase: from 7.1 through 7.1.2.16; from 8.0 (excl.) through 8.0.0.17; from 8.0.1 through 8.0.1.10

References

http://www-01.ibm.com/support/docview.wss?uid=swg21976566
https://exchange.xforce.ibmcloud.com/vulnerabilities/106715
http://www-01.ibm.com/support/docview.wss?uid=swg21976566
https://exchange.xforce.ibmcloud.com/vulnerabilities/106715

Get alerted when CVE-2015-5039 or the next vulnerability affects your stack