← Database

CVE-2008-1287

MEDIUM CVSS: 5.0 Published: 2008-03-11 Modified: 2026-06-16

Description

IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames.

Affected Platforms

Ibm Rational Clearquest

Weakness Type

CWE-16

References