Unauthorized Access Vulnerability in IBM Rational ClearCase GIT Connector
CVE-2019-4059

7.5HIGH

Key Information:

Vendor
IBM
Status
Rational Clearcase
Vendor
CVE Published:
15 February 2019

Summary

The GIT connector in IBM Rational ClearCase version 1.0.0.0 does not adequately protect the document database password, potentially allowing an attacker to retrieve the password. This could lead to unauthorized access to sensitive information stored in the document database. Proper safeguards and security protocols need to be implemented to mitigate these risks.

Affected Version(s)

Rational ClearCase 1.0.0.0

References

https://www.ibm.com/support/docview.wss?uid=ibm10870810
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/156583
vdb-entryx_refsource_XF

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.