CVE-2008-5329

Опубликовано: 05 дек. 2008

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

ClearQuest Web in IBM Rational ClearQuest MultiSite before 7.1 allows remote servers to direct a client's submissions and changes to an arbitrary database by specifying multiple comma-separated server identifiers on the JTLRMIREGISTRYSERVERS line in a jtl.properties file.

Ссылки

http://secunia.com/advisories/32847
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PK38745
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/46993
http://secunia.com/advisories/32847
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PK38745
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/46993

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:rational_clearquest:*:*:*:*:*:*:*:*

Версия до 7.0.0.3 (включая)

cpe:2.3:a:ibm:rational_clearquest:7.0.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.0.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.0.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.00396

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-67pw-2m8g-538g

github

больше 3 лет назад