Description
The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7 before 7.1 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object tree.
References
- PK65908 vendor-advisory
- 32847 third-party-advisory
- clearquest-maintenance-info-disclosure(46995) vdb-entry