| Package | Affected versions | Patched versions |
|---|---|---|
| rational clearcase | = 7.1= 7.1.0.1= 7.1.0.2= 7.1.1= 7.1.1.1= 7.1.1.2= 7.1.1.3= 7.1.1.4= 7.1.1.5= 7.1.1.6= 7.1.1.7= 7.1.1.8= 7.1.1.9= 7.1.2= 7.1.2.1= 7.1.2.10= 7.1.2.11= 7.1.2.12= 7.1.2.13= 7.1.2.14= 7.1.2.2= 7.1.2.3= 7.1.2.4= 7.1.2.5= 7.1.2.6= 7.1.2.7= 7.1.2.9= 8.0= 8.0.0.1= 8.0.0.10= 8.0.0.11= 8.0.0.2= 8.0.0.3= 8.0.0.4= 8.0.0.5= 8.0.0.6= 8.0.0.7= 8.0.0.8= 8.0.0.9= 8.0.1= 8.0.1.1= 8.0.1.2= 8.0.1.3= 8.0.1.4 |
The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote attackers to obtain access via a brute-force attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free