CVE-2009-4357

CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow…

published December 18, 2009

CVSS
—
EPSS
1%
Percentile
64.7
In the wild
Unconfirmed
What it is

CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow attackers to discover the passwords for user accounts via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01076 · 64.7th percentile
Published
2009-12-18T19:00Z
EPSS history
Timeline
  • 18 DEC 19:00Z
    CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow…
    cvelistv5