PT-2008-6454 · Ibm · Ibm Rational Clearcase

Published 2008-12-05 · Updated 2017-08-08 · CVE-2008-5330

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Rational ClearCase versions 7.0.0 through 7.0.0.3 IBM Rational ClearCase version 7.0.1.1-RATL-RCC-IFIX02 and possibly other 7.0.1 versions before 7.0.1.3

Description The issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO of a URI associated with a VOB page, due to multiple cross-site scripting (XSS) vulnerabilities in the web interface of the ClearCase RWP server.

Recommendations For IBM Rational ClearCase versions 7.0.0 through 7.0.0.3, update to version 7.0.0.4 or later. For IBM Rational ClearCase version 7.0.1.1-RATL-RCC-IFIX02 and possibly other 7.0.1 versions before 7.0.1.3, update to version 7.0.1.3 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2008-5330

Affected Products

Ibm Rational Clearcase

References · 8

• 🔥 https://exploit-db.com/exploits/32631 · Exploit
• http://www-01.ibm.com/support/docview.wss?uid=swg1PK70972 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-5330 · Security Note
• http://securitytracker.com/id?1021295 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46983 · Note
• http://secunia.com/advisories/32957 · Note
• http://vupen.com/english/advisories/2008/3330 · Note
• http://securityfocus.com/bid/32574 · Note