Security Bulletin: ClearCase installer exposes server passwords in memory (CVE-2014-6134)

Summary IBM Rational ClearCase's installer exposes server passwords in memory during the installation procedure. Vulnerability Details CVEID: CVE-2014-6134 DESCRIPTION: IBM ClearCase installer exposes server passwords in memory in clear text so that a local attacker can examine the process and...

CVE-2014-6134

CVE-2014-6134 affects IBM Rational ClearCase 8.0.0 prior to 8.0.0.14 and 8.0.1 prior to 8.0.1.7. During installation, when using Installation Manager before 1.8.2, the installer retains server passwords in cleartext in process memory, enabling a local attacker with access to the installation acco...