Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:rational_clearcase:7.1.2.3:*:*:*:*:*:*:*

part: a version: 7.1.2.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductRational Clearcase (d59df164-0934-5cf8-9d35-3a523e1e66b6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-6221 vulnerable 2026-06-08 05:05:56.857567 Details available
The MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7 does not properly generate random numbers, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.
Published: 2015-04-06T00:00:00.000Z
Updated: 2024-08-06T12:10:12.940Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3106 vulnerable 2026-06-08 05:05:31.187503 Details available
IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not properly implement the Local Access Only protection mechanism, which allows remote attackers to bypass authentication and read files via the Help Server Administration feature.
Published: 2014-09-23T21:00:00.000Z
Updated: 2024-08-06T10:35:56.954Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3105 vulnerable 2026-06-08 05:05:31.186327 Details available
The OSLC integration feature in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 provides different error messages for failed login attempts depending on whether the username exists, which allows remote attackers to enumerate account names via a series of requests.
Published: 2014-09-23T21:00:00.000Z
Updated: 2024-08-06T10:35:56.347Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3104 vulnerable 2026-06-08 05:05:31.185054 Details available
IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
Published: 2014-09-23T21:00:00.000Z
Updated: 2024-08-06T10:35:55.935Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3103 vulnerable 2026-06-08 05:05:31.183635 Details available
The Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
Published: 2014-09-23T21:00:00.000Z
Updated: 2024-08-06T10:35:56.666Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3101 vulnerable 2026-06-08 05:05:31.176867 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3090 vulnerable 2026-06-08 05:05:31.075155 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0829 vulnerable 2026-06-08 05:05:14.635262 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5422 vulnerable 2026-06-08 05:04:51.640473 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5416 vulnerable 2026-06-08 05:04:51.624026 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5415 vulnerable 2026-06-08 05:04:51.616057 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.