CVE-2008-1287: IBM Rational Clearquest

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames.

Affected products

• IBM Rational Clearquest: version 7.0.0.2 only; version 7.0.1.1 only

Published 2008-03-11. Last modified 2026-06-16.