CVE-2015-4996: Infoleak
Published Jan 2, 2016
·Updated
IBM Rational ClearQuest 7.1.x and 8.0.0.x before 8.0.0.17 and 8.0.1.x before 8.0.1.10 allows local users to spoof database servers and discover credentials via unspecified vectors.
Affected Software
52 affected components
IBM Rational ClearQuest=7.1
IBM Rational ClearQuest=7.1.0.1
IBM Rational ClearQuest=7.1.0.2
IBM Rational ClearQuest=7.1.1
IBM Rational ClearQuest=7.1.1.1
IBM Rational ClearQuest=7.1.1.2
IBM Rational ClearQuest=7.1.1.3
IBM Rational ClearQuest=7.1.1.4
IBM Rational ClearQuest=7.1.1.5
IBM Rational ClearQuest=7.1.1.6
IBM Rational ClearQuest=7.1.1.7
IBM Rational ClearQuest=7.1.1.8
IBM Rational ClearQuest=7.1.1.9
IBM Rational ClearQuest=7.1.2
IBM Rational ClearQuest=7.1.2.1
IBM Rational ClearQuest=7.1.2.2
IBM Rational ClearQuest=7.1.2.3
IBM Rational ClearQuest=7.1.2.4
IBM Rational ClearQuest=7.1.2.5
IBM Rational ClearQuest=7.1.2.6
IBM Rational ClearQuest=7.1.2.7
IBM Rational ClearQuest=7.1.2.8
IBM Rational ClearQuest=7.1.2.9
IBM Rational ClearQuest=7.1.2.10
IBM Rational ClearQuest=7.1.2.11
IBM Rational ClearQuest=7.1.2.12
IBM Rational ClearQuest=8.0.0
IBM Rational ClearQuest=8.0.0.1
IBM Rational ClearQuest=8.0.0.2
IBM Rational ClearQuest=8.0.0.3
IBM Rational ClearQuest=8.0.0.4
IBM Rational ClearQuest=8.0.0.5
IBM Rational ClearQuest=8.0.0.6
IBM Rational ClearQuest=8.0.0.7
IBM Rational ClearQuest=8.0.0.8
IBM Rational ClearQuest=8.0.0.9
IBM Rational ClearQuest=8.0.0.10
IBM Rational ClearQuest=8.0.0.11
IBM Rational ClearQuest=8.0.0.12
IBM Rational ClearQuest=8.0.0.13
IBM Rational ClearQuest=8.0.0.14
IBM Rational ClearQuest=8.0.0.15
IBM Rational ClearQuest=8.0.0.16
IBM Rational ClearQuest=8.0.1
IBM Rational ClearQuest=8.0.1.1
IBM Rational ClearQuest=8.0.1.2
IBM Rational ClearQuest=8.0.1.3
IBM Rational ClearQuest=8.0.1.4
IBM Rational ClearQuest=8.0.1.5
IBM Rational ClearQuest=8.0.1.7
IBM Rational ClearQuest=8.0.1.8
IBM Rational ClearQuest=8.0.1.9
Event History
Jan 2, 2016
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-4996?
CVE-2015-4996 is rated as a medium severity vulnerability.
2
How do I fix CVE-2015-4996?
To remediate CVE-2015-4996, upgrade to IBM Rational ClearQuest version 8.0.0.17, 8.0.1.10, or later.
3
What types of attacks are possible through CVE-2015-4996?
Attackers can exploit CVE-2015-4996 to spoof database servers and potentially access user credentials.
4
Which versions of IBM Rational ClearQuest are affected by CVE-2015-4996?
CVE-2015-4996 affects IBM Rational ClearQuest versions 7.1.x and 8.0.0.x prior to 8.0.0.17 and 8.0.1.x prior to 8.0.1.10.
5
Can local users exploit CVE-2015-4996?
Yes, local users can exploit CVE-2015-4996 through unspecified vectors.