Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The OSLC integration feature in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 provides different error messages for failed login attempts depending on whether the username exists, which allows remote attackers to enumerate account names via a series of requests.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Rational ClearQuest Web组件安全漏洞
Vulnerability Description
IBM Rational ClearQuest是美国IBM公司的一套应用程序生命周期管理 (ALM) 软件。该软件为应用程序提供缺陷跟踪、流程定制、实时报告等，从而提高开发周期的可视性和可控性。 IBM Rational ClearQuest的Web组件中的OSLC集成功能中存在安全漏洞，该漏洞源于程序对有效和无效的登录提供不同的错误信息。远程攻击者可通过发送一系列的请求利用该漏洞枚举账户名。以下版本受到影响：IBM Rational ClearQuest 7.1.2.15之前7.1版本，8.0.0.12
CVSS Information
N/A
Vulnerability Type
N/A