Description
The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object tree during an import process.
References
- PK65908 vendor-advisory
- 32847 third-party-advisory
- clearquest-maintenance-info-disclosure(46995) vdb-entry