CVE-2014-3105

Опубликовано: 23 сент. 2014

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The OSLC integration feature in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 provides different error messages for failed login attempts depending on whether the username exists, which allows remote attackers to enumerate account names via a series of requests.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21682949
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/94312
http://www-01.ibm.com/support/docview.wss?uid=swg21682949
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/94312

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:rational_clearcase:7.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.1.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.1.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.1.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.1.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.1.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.1.9:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.9:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.10:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.11:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.12:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.13:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.14:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.9:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.10:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.11:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.1.4:*:*:*:*:*:*:*

EPSS

Процентиль: 43%

0.00207

Низкий

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-p9xp-4qhh-8rv8

github

больше 3 лет назад