CVE-2015-5039: High severity ibm rational clearcase vulnerability
The Remote Client and change management integrations in IBM Rational ClearCase 7.1.x, 8.0.0.x before 8.0.0.18, and 8.0.1.x before 8.0.1.11 do not properly validate hostnames in X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information or modify network traffic via a crafted certificate. IBM X-Force ID: 106715.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5039?
CVE-2015-5039 is classified as a moderate severity vulnerability due to potential exploitation by remote attackers.
How do I fix CVE-2015-5039?
To fix CVE-2015-5039, upgrade IBM Rational ClearCase to version 8.0.0.18 or 8.0.1.11 or later.
Which versions of IBM Rational ClearCase are affected by CVE-2015-5039?
IBM Rational ClearCase versions 7.1.x, 8.0.0.x before 8.0.0.18, and 8.0.1.x before 8.0.1.11 are affected by CVE-2015-5039.
What type of attack does CVE-2015-5039 enable?
CVE-2015-5039 allows remote attackers to spoof SSL servers and potentially access sensitive information.
What is the main issue of CVE-2015-5039?
The main issue of CVE-2015-5039 is the improper validation of hostnames in X.509 certificates.