CVEvulnerability
CVE-2014-6123
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-12-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow local users to obtain sensitive credential information by reading installation logs.
Affected configurations
• ibm rational appscan source 8.0.0.0
• ibm rational appscan source 8.0.0.1
• ibm rational appscan source 8.0.0.2
• ibm rational appscan source 8.5.0.0
• ibm rational appscan source 8.5.0.1
• ibm security appscan source 8.6.0.0
• ibm security appscan source 8.6.0.1
• ibm security appscan source 8.6.0.2
• ibm security appscan source 8.7.0.0
• ibm security appscan source 8.7.0.1
• ibm security appscan source 8.8
• ibm security appscan source 9.0
• ibm security appscan source 9.0.0.0
• ibm security appscan source 9.0.1
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21692999 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96724 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21692999 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96724 exchange.xforce.ibmcloud.com