PT-2019-16871 · Ibm · Ibm Rational Clearcase
CVE-2019-4059
·
Publicado
2019-02-15
·
Atualizado
2023-02-03
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
IBM Rational ClearCase version 1.0.0.0
Description
The issue concerns insufficient protection of the document database password in the GIT connector. This could allow an attacker to obtain the password, resulting in unauthorized access to the document database.
Recommendations
For IBM Rational ClearCase version 1.0.0.0, consider restricting access to the document database until a fix is available, and ensure that all connections to the database are securely authenticated to minimize the risk of exploitation.
Correção
Insufficiently Protected Credentials
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ibm Rational Clearcase