Rational Clearcase (Ibm) - vulnerabilities (CVEs)
19 CVEs, 0 in the last 30 days, 115 known versions, newest CVE from 2019-02-15. Vendor: Ibm.
CVEs of Rational Clearcase
- CVE-2019-4059 - CVSS 9.8 (critical), 2019-02-15: IBM Rational ClearCase 1.0.0.0 GIT connector does not sufficiently protect the document database password. An attacker could obtain the password and gain…
- CVE-2014-0931 - CVSS 9.1 (critical), 2018-04-20: Multiple XML external entity (XXE) vulnerabilities in the (1) CCRC WAN Server / CM Server, (2) Perl CC/CQ integration trigger scripts, (3) CMAPI Java…
- CVE-2015-5039 - CVSS 7.4 (high), 2018-03-26: The Remote Client and change management integrations in IBM Rational ClearCase 7.1.x, 8.0.0.x before 8.0.0.18, and 8.0.1.x before 8.0.1.11 do not properly…
- CVE-2014-6221 - CVSS 9.4 (critical), 2015-04-06: The MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7 does…
- CVE-2014-6134 - CVSS 1.2 (low), 2015-03-25: IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation Manager before 1.8.2 is used, retains cleartext server passwords in…
- CVE-2014-3106 - CVSS 5 (medium), 2014-09-23: IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not properly implement the Local Access Only protection…
- CVE-2014-3105 - CVSS 5 (medium), 2014-09-23: The OSLC integration feature in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 provides…
- CVE-2014-3104 - CVSS 5 (medium), 2014-09-23: IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 allows remote attackers to cause a denial of service (memory…
- CVE-2014-3103 - CVSS 5 (medium), 2014-09-23: The Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not set the secure flag for the session…
- CVE-2014-3101 - CVSS 5 (medium), 2014-09-23: The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay…
- CVE-2014-3090 - CVSS 5 (medium), 2014-09-23: IBM Rational ClearCase 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 allows remote attackers to cause a denial of service (memory…
- CVE-2014-0829 - CVSS 6.5 (medium), 2014-03-21: Multiple buffer overflows in IBM Rational ClearCase 7.x before 7.1.2.13, 8.0.0.x before 8.0.0.10, and 8.0.1.x before 8.0.1.3 allow remote authenticated users…
- CVE-2013-5422 - CVSS 4.3 (medium), 2013-12-19: The Web Client in IBM Rational ClearQuest 7.1 through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2, when a multi-database dataset exists,…
- CVE-2013-5416 - CVSS 7.2 (high), 2013-12-18: Unspecified vulnerability in IBM Rational ClearCase through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2 allows local users to gain privileges…
- CVE-2013-5415 - CVSS 7.2 (high), 2013-12-18: Buffer overflow in IBM Rational ClearCase through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2 allows local users to gain privileges via…
- CVE-2013-5373 - CVSS 6.9 (medium), 2013-09-25: The RemoteClient component in IBM Rational ClearCase 8.0.0.03 through 8.0.0.07, and 8.0.1, uses world-writable permissions for the rcleartool script, which…
- CVE-2011-1205 - CVSS 6.9 (medium), 2011-03-29: Multiple buffer overflows in unspecified COM objects in Rational Common Licensing 7.0 through 7.1.1.4 in IBM Rational ClearCase 7.0.0.4 through 7.1.1.4,…
- CVE-2009-4357 - CVSS 5 (medium), 2009-12-18: CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow…
- CVE-2009-1292 - CVSS 2.1 (low), 2009-04-14: UCM-CQ in IBM Rational ClearCase 7.0.0.x before 7.0.0.5, 7.0.1.x before 7.0.1.4, and 7.1.x before 7.1.0.1 on Linux and AIX places a username and password on…
