|Date: (C)2008-12-04 (M)2017-08-08|
|CVSS Score: 4.4||Access Vector: LOCAL|
|Exploitability Subscore: 3.4||Access Complexity: MEDIUM|
|Impact Subscore: 6.4||Authentication: NONE|
| ||Confidentiality: PARTIAL|
| ||Integrity: PARTIAL|
| ||Availability: PARTIAL|
The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 220.127.116.11 and 7.0.1 before 18.104.22.168 on Windows allows local users to obtain (1) user and (2) database passwords by using a password revealer utility on a field containing a series of asterisks.