CVE-2012-2165: IBM Rational Clearquest

Low severity, CVSS 3.5. EPSS: 1% chance of exploitation in the next 30 days.

IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3, when ClearQuest Authentication is enabled, allows remote authenticated users to read password hashes via a user query.

Affected products

• IBM Rational Clearquest: version 7.1.1.1 only; version 7.1.1.2 only; version 7.1.1.3 only; version 7.1.1.4 only; version 7.1.1.5 only; version 7.1.1.6 only; …

Published 2012-08-17. Last modified 2026-06-16.