|Date: (C)2008-12-04 (M)2017-08-08|| |
The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 184.108.40.206 and 7.0.1 before 220.127.116.11 on Windows allows local users to obtain (1) user and (2) database passwords by using a password revealer utility on a field containing a series of asterisks.
|CVSS Score: 4.4||Access Vector: LOCAL|
|Exploit Score: 3.4||Access Complexity: MEDIUM|
|Impact Score: 6.4||Authentication: NONE|
| ||Confidentiality: PARTIAL|
| ||Integrity: PARTIAL|
| ||Availability: PARTIAL|