Lucene search

[email protected]CVE-2014-3089

HistoryAug 22, 2014 - 1:55 a.m.

CVE-2014-3089

2014-08-2201:55:00

CWE-310

[email protected]

web.nvd.nist.gov

ibm

rds

java client

rational directory server

cve-2014-3089

security vulnerability

5.7 Medium

AI Score

Confidence

Low

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%

JSON

The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0 before iFix002, includes the cleartext root password, which allows local users to obtain sensitive information by reading a library file.

CPENameOperatorVersion
ibm:rational_directory_serveribm rational directory servereq5.1.1.1
ibm:rational_directory_administratoribm rational directory administratoreq6.0.0.1
ibm:rational_directory_administratoribm rational directory administratoreq6.0
ibm:rational_directory_serveribm rational directory servereq5.2
ibm:rational_directory_serveribm rational directory servereq5.1.1
ibm:rational_directory_serveribm rational directory servereq5.1.1.2
ibm:rational_directory_serveribm rational directory servereq5.2.0.1
ibm:rational_directory_serveribm rational directory servereq5.2.1
ibm:rational_directory_serveribm rational directory servereq5.2.0.2

CPE	Name	Operator	Version
ibm:rational_directory_server	ibm rational directory server	eq	5.1.1.1
ibm:rational_directory_administrator	ibm rational directory administrator	eq	6.0.0.1
ibm:rational_directory_administrator	ibm rational directory administrator	eq	6.0
ibm:rational_directory_server	ibm rational directory server	eq	5.2
ibm:rational_directory_server	ibm rational directory server	eq	5.1.1
ibm:rational_directory_server	ibm rational directory server	eq	5.1.1.2
ibm:rational_directory_server	ibm rational directory server	eq	5.2.0.1
ibm:rational_directory_server	ibm rational directory server	eq	5.2.1
ibm:rational_directory_server	ibm rational directory server	eq	5.2.0.2

References

www-01.ibm.com/support/docview.wss?uid=swg21681554

www.securityfocus.com/bid/69300

exchange.xforce.ibmcloud.com/vulnerabilities/94255

5.7 Medium

AI Score

Confidence

Low

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2014-3089

ibm3 prion1 cvelist1