CVEブラウザに戻る

CVE-2015-5039

HIGH

7.4

CVSS Severity Score

EPSS Score0.1400%

EPSS Percentile11.91th

Published2018年3月26日

Last Modified2024年11月21日

Vulnerability Description

The Remote Client and change management integrations in IBM Rational ClearCase 7.1.x, 8.0.0.x before 8.0.0.18, and 8.0.1.x before 8.0.1.11 do not properly validate hostnames in X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information or modify network traffic via a crafted certificate. IBM X-Force ID: 106715.

Affected Platforms (CPE)

📦

Ibm

Rational Clearcase

>= 7.1 and <= 7.1.2.16

📦

Ibm

Rational Clearcase

> 8.0 and <= 8.0.0.17

📦

Ibm

Rational Clearcase

>= 8.0.1 and <= 8.0.1.10

References & Advisories

🔗 http://www-01.ibm.com/support/docview.wss?uid=swg21976566

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/106715

🔗 http://www-01.ibm.com/support/docview.wss?uid=swg21976566

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/106715

関連する脆弱性情報

CVE-2019-40599.8

IBM Rational ClearCase 1.0.0.0 GIT connector does not sufficiently protect the document database password. An attacker could obtai...

CVE-2014-62219.4

The MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and...

CVE-2014-09319.1

Multiple XML external entity (XXE) vulnerabilities in the (1) CCRC WAN Server / CM Server, (2) Perl CC/CQ integration trigger scri...

CVE-2013-54167.2

Unspecified vulnerability in IBM Rational ClearCase through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2 allows lo...