Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:rational_clearcase:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductRational Clearcase (d59df164-0934-5cf8-9d35-3a523e1e66b6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-4059 vulnerable 2026-06-08 05:13:56.765105 Details available
HIGH (7.5)
IBM Rational ClearCase 1.0.0.0 GIT connector does not sufficiently protect the document database password. An attacker could obtain the password and gain unauthorized access to the document database. IBM X-Force ID: 156583.
Published: 2019-02-15T20:00:00.000Z
Updated: 2024-09-17T02:20:40.715Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5039 vulnerable 2026-06-08 05:06:48.620298 Details available
The Remote Client and change management integrations in IBM Rational ClearCase 7.1.x, 8.0.0.x before 8.0.0.18, and 8.0.1.x before 8.0.1.11 do not properly validate hostnames in X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information or modify network traffic via a crafted certificate. IBM X-Force ID: 106715.
Published: 2018-03-26T18:00:00.000Z
Updated: 2024-08-06T06:32:32.082Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0931 vulnerable 2026-06-08 05:05:15.132731 Details available
Multiple XML external entity (XXE) vulnerabilities in the (1) CCRC WAN Server / CM Server, (2) Perl CC/CQ integration trigger scripts, (3) CMAPI Java interface, (4) ClearCase remote client, and (5) CMI and OSLC-based ClearQuest integrations components in IBM Rational ClearCase 7.1.0.x, 7.1.1.x, 7.1.2 through 7.1.2.13, 8.0 through 8.0.0.10, and 8.0.1 through 8.0.1.3 allow remote attackers to cause a denial of service or access other servers via crafted XML data. IBM X-Force ID: 92263.
Published: 2018-04-20T21:00:00.000Z
Updated: 2024-08-06T09:34:40.349Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4357 vulnerable 2026-06-08 04:51:48.197862 Details available
CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow attackers to discover the passwords for user accounts via unspecified vectors.
Published: 2009-12-18T19:00:00.000Z
Updated: 2024-09-17T03:59:45.984Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.