Lucene search

K
cve[email protected]CVE-2014-6221
HistoryApr 06, 2015 - 12:59 a.m.

CVE-2014-6221

2015-04-0600:59:00
CWE-310
web.nvd.nist.gov
16
ibm
rational clearcase
gskit
mscapi
mscng
cve-2014-6221
security
vulnerability
nvd
cryptographic protection

6.3 Medium

AI Score

Confidence

Low

9.4 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:C/A:N

0.002 Low

EPSS

Percentile

59.3%

The MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7 does not properly generate random numbers, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.

6.3 Medium

AI Score

Confidence

Low

9.4 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:C/A:N

0.002 Low

EPSS

Percentile

59.3%

Related for CVE-2014-6221