CVE-2009-1292

Currently unrated

Key Information:

Vendor
IBM
Status
Rational Clearcase
Vendor
CVE Published:
14 April 2009

Summary

UCM-CQ in IBM Rational ClearCase 7.0.0.x before 7.0.0.5, 7.0.1.x before 7.0.1.4, and 7.1.x before 7.1.0.1 on Linux and AIX places a username and password on the command line, which allows local users to obtain credentials by listing the process.

References

http://www.securityfocus.com/bid/34483
vdb-entryx_refsource_BID
http://www-01.ibm.com/support/docview.wss?uid=swg1PK75832
vendor-advisoryx_refsource_AIXAPAR
http://secunia.com/advisories/34689
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.