Description
UCM-CQ in IBM Rational ClearCase 7.0.0.x before 7.0.0.5, 7.0.1.x before 7.0.1.4, and 7.1.x before 7.1.0.1 on Linux and AIX places a username and password on the command line, which allows local users to obtain credentials by listing the process.
References
- 34483 vdb-entry
- PK75832 vendor-advisory
- 34689 third-party-advisory
- clearcase-ucmcq-information-disclosure(49836) vdb-entry
- ADV-2009-1017 vdb-entry
- 1022035 vdb-entry