Lucene search
IbmCVE-2014-6134HistoryMar 25, 2015 - 1:59 a.m.
CVE-2014-6134
2015-03-2501:59:03
CWE-200
ibm
web.nvd.nist.gov
29
ibm
rational clearcase
installation manager
security
passwords
memory
vulnerability
cve-2014-6134
CVSS2
1.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:H/Au:N/C:P/I:N/A:N
AI Score
5.8
Confidence
Low
EPSS
0
Percentile
5.1%
IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation Manager before 1.8.2 is used, retains cleartext server passwords in process memory throughout the installation procedure, which might allow local users to obtain sensitive information by leveraging access to the installation account.
Affected configurations
Node
ibminstallation_managerRange≤1.8.1.0
Node
ibmrational_clearcaseMatch8.0.0
ORibmrational_clearcaseMatch8.0.0.1
ORibmrational_clearcaseMatch8.0.0.2
ORibmrational_clearcaseMatch8.0.0.3
ORibmrational_clearcaseMatch8.0.0.4
ORibmrational_clearcaseMatch8.0.0.5
ORibmrational_clearcaseMatch8.0.0.6
ORibmrational_clearcaseMatch8.0.0.7
ORibmrational_clearcaseMatch8.0.0.8
ORibmrational_clearcaseMatch8.0.0.9
ORibmrational_clearcaseMatch8.0.0.10
ORibmrational_clearcaseMatch8.0.0.11
ORibmrational_clearcaseMatch8.0.0.12
ORibmrational_clearcaseMatch8.0.0.13
ORibmrational_clearcaseMatch8.0.1
ORibmrational_clearcaseMatch8.0.1.1
ORibmrational_clearcaseMatch8.0.1.2
ORibmrational_clearcaseMatch8.0.1.3
ORibmrational_clearcaseMatch8.0.1.4
ORibmrational_clearcaseMatch8.0.1.5
ORibmrational_clearcaseMatch8.0.1.6
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | installation_manager | * | cpe:2.3:a:ibm:installation_manager:*:*:*:*:*:*:*:* |
| ibm | rational_clearcase | 8.0.0 | cpe:2.3:a:ibm:rational_clearcase:8.0.0:*:*:*:*:*:*:* |
| ibm | rational_clearcase | 8.0.0.1 | cpe:2.3:a:ibm:rational_clearcase:8.0.0.1:*:*:*:*:*:*:* |
| ibm | rational_clearcase | 8.0.0.2 | cpe:2.3:a:ibm:rational_clearcase:8.0.0.2:*:*:*:*:*:*:* |
| ibm | rational_clearcase | 8.0.0.3 | cpe:2.3:a:ibm:rational_clearcase:8.0.0.3:*:*:*:*:*:*:* |
| ibm | rational_clearcase | 8.0.0.4 | cpe:2.3:a:ibm:rational_clearcase:8.0.0.4:*:*:*:*:*:*:* |
| ibm | rational_clearcase | 8.0.0.5 | cpe:2.3:a:ibm:rational_clearcase:8.0.0.5:*:*:*:*:*:*:* |
| ibm | rational_clearcase | 8.0.0.6 | cpe:2.3:a:ibm:rational_clearcase:8.0.0.6:*:*:*:*:*:*:* |
| ibm | rational_clearcase | 8.0.0.7 | cpe:2.3:a:ibm:rational_clearcase:8.0.0.7:*:*:*:*:*:*:* |
| ibm | rational_clearcase | 8.0.0.8 | cpe:2.3:a:ibm:rational_clearcase:8.0.0.8:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2014-6134
2015-03-25 01:59:03
cvelist
cvelist
CVE-2014-6134
2015-03-25 01:00:00
prion
prion
Information disclosure
2015-03-25 01:59:00
ibm
ibm
kaspersky
kaspersky
KLA10503 Multiple vulnerabilities in IBM products
2015-03-24 00:00:00
CVSS2
1.2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:H/Au:N/C:P/I:N/A:N
AI Score
5.8
Confidence
Low
EPSS
0
Percentile
5.1%
Related for CVE-2014-6134