CVE-2009-4357
CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow attackers to discover th…
Published: 2009-12-18 · CVSS: Unscored
CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow attackers to discover the passwords for user accounts via unspecified vectors.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7