PT-2008-2879 · Ibm · Ibm Rational Clearquest

Publicado 2008-03-11 · Atualizado 2017-08-08 · CVE-2008-1287

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Rational ClearQuest versions 7.0.0.2 through 7.0.1.1

Description The issue allows remote attackers to enumerate usernames by generating different error messages depending on whether the username is valid or invalid.

Recommendations For versions 7.0.0.2 through 7.0.1.1, consider implementing additional authentication measures to prevent username enumeration, such as returning generic error messages for all authentication attempts.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2008-1287

Produtos afetados

Ibm Rational Clearquest

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2008-1287 · Nota de Segurança
• http://vupen.com/english/advisories/2008/0804/references · Aviso do Fabricante
• http://securityfocus.com/bid/28132 · Correção
• http://secunia.com/advisories/29280 · Aviso do Fabricante
• http://www-1.ibm.com/support/docview.wss?uid=swg1PK55561 · Correção, Aviso do Fabricante
• http://securitytracker.com/id?1019566 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41042 · Nota