Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:rational_clearcase:7.0.1.1:*:*:*:*:*:*:*

part: a version: 7.0.1.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductRational Clearcase (d59df164-0934-5cf8-9d35-3a523e1e66b6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0829 vulnerable 2026-06-03 14:33:39.893088 Details available
Multiple buffer overflows in IBM Rational ClearCase 7.x before 7.1.2.13, 8.0.0.x before 8.0.0.10, and 8.0.1.x before 8.0.1.3 allow remote authenticated users to obtain privileged access via unspecified vectors.
Published: 2014-03-21T10:00:00.000Z
Updated: 2024-08-06T09:27:20.140Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1205 vulnerable 2026-06-03 14:30:59.472438 Details available
Multiple buffer overflows in unspecified COM objects in Rational Common Licensing 7.0 through 7.1.1.4 in IBM Rational ClearCase 7.0.0.4 through 7.1.1.4, ClearQuest 7.0.0.4 through 7.1.1.4, and other products allow local users to gain privileges via a Trojan horse HTML document in the My Computer zone.
Published: 2011-03-29T18:00:00.000Z
Updated: 2024-08-06T22:21:33.761Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4357 vulnerable 2026-06-03 14:29:57.428538 Details available
CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow attackers to discover the passwords for user accounts via unspecified vectors.
Published: 2009-12-18T19:00:00.000Z
Updated: 2024-09-17T03:59:45.984Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1292 vulnerable 2026-06-03 14:29:29.079760 Details available
UCM-CQ in IBM Rational ClearCase 7.0.0.x before 7.0.0.5, 7.0.1.x before 7.0.1.4, and 7.1.x before 7.1.0.1 on Linux and AIX places a username and password on the command line, which allows local users to obtain credentials by listing the process.
Published: 2009-04-14T16:00:00.000Z
Updated: 2024-08-07T05:04:49.543Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.