CyberSec.Space Logo
Back to CVE Browser

CVE-2015-5039

HIGH
7.4
CVSS Severity Score
EPSS Score0.1400%
EPSS Percentile11.91th
PublishedMar 26, 2018
Last ModifiedNov 21, 2024

Vulnerability Description

The Remote Client and change management integrations in IBM Rational ClearCase 7.1.x, 8.0.0.x before 8.0.0.18, and 8.0.1.x before 8.0.1.11 do not properly validate hostnames in X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information or modify network traffic via a crafted certificate. IBM X-Force ID: 106715.

Affected Platforms (CPE)

📦
Ibm

Rational Clearcase

>= 7.1 and <= 7.1.2.16
📦
Ibm

Rational Clearcase

> 8.0 and <= 8.0.0.17
📦
Ibm

Rational Clearcase

>= 8.0.1 and <= 8.0.1.10

References & Advisories

🔗 http://www-01.ibm.com/support/docview.wss?uid=swg21976566
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/106715
🔗 http://www-01.ibm.com/support/docview.wss?uid=swg21976566
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/106715

Related Vulnerabilities

CVE-2019-40599.8

IBM Rational ClearCase 1.0.0.0 GIT connector does not sufficiently protect the document database password. An attacker could obtai...

CVE-2014-62219.4

The MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and...

CVE-2014-09319.1

Multiple XML external entity (XXE) vulnerabilities in the (1) CCRC WAN Server / CM Server, (2) Perl CC/CQ integration trigger scri...

CVE-2013-54167.2

Unspecified vulnerability in IBM Rational ClearCase through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2 allows lo...