Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:rational_clearcase:8.0.1:*:*:*:*:*:*:*

part: a version: 8.0.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductRational Clearcase (d59df164-0934-5cf8-9d35-3a523e1e66b6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-6221 vulnerable 2026-06-08 05:05:56.864040 Details available
The MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7 does not properly generate random numbers, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.
Published: 2015-04-06T00:00:00.000Z
Updated: 2024-08-06T12:10:12.940Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6134 vulnerable 2026-06-08 05:05:56.488820 Details available
IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation Manager before 1.8.2 is used, retains cleartext server passwords in process memory throughout the installation procedure, which might allow local users to obtain sensitive information by leveraging access to the installation account.
Published: 2015-03-25T01:00:00.000Z
Updated: 2024-08-06T12:10:12.046Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3106 vulnerable 2026-06-08 05:05:31.187932 Details available
IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not properly implement the Local Access Only protection mechanism, which allows remote attackers to bypass authentication and read files via the Help Server Administration feature.
Published: 2014-09-23T21:00:00.000Z
Updated: 2024-08-06T10:35:56.954Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3105 vulnerable 2026-06-08 05:05:31.186692 Details available
The OSLC integration feature in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 provides different error messages for failed login attempts depending on whether the username exists, which allows remote attackers to enumerate account names via a series of requests.
Published: 2014-09-23T21:00:00.000Z
Updated: 2024-08-06T10:35:56.347Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3104 vulnerable 2026-06-08 05:05:31.185499 Details available
IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
Published: 2014-09-23T21:00:00.000Z
Updated: 2024-08-06T10:35:55.935Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3103 vulnerable 2026-06-08 05:05:31.184208 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3101 vulnerable 2026-06-08 05:05:31.177361 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3090 vulnerable 2026-06-08 05:05:31.088010 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0829 vulnerable 2026-06-08 05:05:14.640091 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5422 vulnerable 2026-06-08 05:04:51.640770 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5416 vulnerable 2026-06-08 05:04:51.624327 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5415 vulnerable 2026-06-08 05:04:51.622485 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5373 vulnerable 2026-06-08 05:04:51.437494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.