CVE-2008-1287: Medium severity ibm rational clearquest vulnerability
Published Mar 11, 2008
·Updated
IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames.
Affected Software
2 affected components
IBM Rational ClearQuest=7.0.1.1
IBM Rational ClearQuest=7.0.0.2
Remediation
Patch Available
Patch Available
Patch Available
Event History
Mar 11, 2008
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-1287?
CVE-2008-1287 is classified as a medium severity vulnerability due to its potential for username enumeration.
2
How do I fix CVE-2008-1287?
To remediate CVE-2008-1287, you should upgrade to a fixed version of IBM Rational ClearQuest that addresses the issue.
3
What are the affected versions of CVE-2008-1287?
CVE-2008-1287 affects IBM Rational ClearQuest versions 7.0.1.1 and 7.0.0.2.
4
What type of attack does CVE-2008-1287 enable?
CVE-2008-1287 enables remote attackers to enumerate valid usernames on the affected versions of IBM Rational ClearQuest.
5
Is there public exploit code available for CVE-2008-1287?
There is no widely known public exploit code specifically for CVE-2008-1287, but the vulnerability itself poses a risk to user information.