CVEvulnerability
CVE-2014-3089
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-08-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-310
Description
The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0 before iFix002, includes the cleartext root password, which allows local users to obtain sensitive information by reading a library file.
Affected configurations
• ibm rational directory administrator 6.0
• ibm rational directory administrator 6.0.0.1
• ibm rational directory server 5.1.1
• ibm rational directory server 5.1.1.1
• ibm rational directory server 5.1.1.2
• ibm rational directory server 5.2
• ibm rational directory server 5.2.0.1
• ibm rational directory server 5.2.0.2
• ibm rational directory server 5.2.1
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21681554 Vendor Advisory
- http://www.securityfocus.com/bid/69300 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94255 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21681554 Vendor Advisory
- http://www.securityfocus.com/bid/69300 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94255 exchange.xforce.ibmcloud.com