Unscored CVE-2008-3550 EUVD-2008-3536GHSA-72q8-4qfp-hvwx

The CQWeb login page in IBM Rational ClearQuest 7.0.1 allows remote attackers to obtain potentially sensitive information (page source code…

Published Aug 8, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

The CQWeb login page in IBM Rational ClearQuest 7.0.1 allows remote attackers to obtain potentially sensitive information (page source code) via a combination of ?script? and ?/script? sequences in the id field, possibly related to a cross-site scripting (XSS) vulnerability.

References

PK68332 vendor-advisory
rational-clearquest-login-info-disclosure(44254) vdb-entry
1020642 vdb-entry
ADV-2008-2317 vdb-entry