PT-2019-16871 · Ibm · Ibm Rational Clearcase

Published 2019-02-15 · Updated 2023-02-03 · CVE-2019-4059

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Rational ClearCase version 1.0.0.0

Description The issue concerns insufficient protection of the document database password in the GIT connector. This could allow an attacker to obtain the password, resulting in unauthorized access to the document database.

Recommendations For IBM Rational ClearCase version 1.0.0.0, consider restricting access to the document database until a fix is available, and ensure that all connections to the database are securely authenticated to minimize the risk of exploitation.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2019-4059

Affected Products

Ibm Rational Clearcase

References · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/156583 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-4059 · Vendor Advisory
• https://ibm.com/support/docview.wss?uid=ibm10870810 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4059 · Security Note