CVE-2009-4357

CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow attackers to discover the passwords for user accounts via unspecified vectors.

• CWE-200

• http://secunia.com/advisories/37811Vendor Advisory
• http://securitytracker.com/id?1023370
• http://www-01.ibm.com/support/docview.wss?uid=swg1PK86377Vendor Advisory
• http://www.securityfocus.com/bid/37385
• http://www.vupen.com/english/advisories/2009/3580Vendor Advisory
• http://secunia.com/advisories/37811Vendor Advisory
• http://securitytracker.com/id?1023370
• http://www-01.ibm.com/support/docview.wss?uid=swg1PK86377Vendor Advisory
• http://www.securityfocus.com/bid/37385
• http://www.vupen.com/english/advisories/2009/3580Vendor Advisory

Published

Dec 18, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-4351SQL injection vulnerability in ADMIN/loginaction.php in WSCr…
• CVE-2009-4352Multiple cross-site scripting (XSS) vulnerabilities in Trans…
• CVE-2009-4353The Mobile Edition of TransWARE Active! mail 2003 build 2003…
• CVE-2009-4354TransWARE Active! mail 2003 build 2003.0139.0871 and earlier…
• CVE-2009-4355Memory leak in the zlib_stateful_finish function in crypto/c…
• CVE-2009-4356Multiple integer overflows in the jpeg.w5s and png.w5s filte…
• CVE-2009-4358freebsd-update in FreeBSD 8.0, 7.2, 7.1, 6.4, and 6.3 uses i…
• CVE-2009-4359Cross-site scripting (XSS) vulnerability in folder.php in th…
• CVE-2009-4360SQL injection vulnerability in modules/content/index.php in …
• CVE-2009-4361Multiple buffer overflows in qoslist in IBM AIX 6.1 allow lo…
• CVE-2009-4362Multiple buffer overflows in qosmod in IBM AIX 6.1 allow loc…
• CVE-2009-4363Text_Filter/lib/Horde/Text/Filter/Xss.php in Horde Applicati…