PT-2015-3817 · Ibm · Ibm Rational Clearcase+1

Publicado 2015-03-25 · Atualizado 2015-03-25 · CVE-2014-6134

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Baixa

Vetor base

AV:L/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Rational ClearCase versions 8.0.0 through 8.0.0.13 IBM Rational ClearCase versions 8.0.1 through 8.0.1.6

Description The issue allows local users to potentially obtain sensitive information by accessing the installation account, due to the retention of cleartext server passwords in process memory during the installation procedure when using Installation Manager before version 1.8.2.

Recommendations For IBM Rational ClearCase versions 8.0.0 through 8.0.0.13, update to version 8.0.0.14 or later. For IBM Rational ClearCase versions 8.0.1 through 8.0.1.6, update to version 8.0.1.7 or later. As a temporary workaround, consider restricting access to the installation account to minimize the risk of exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2014-6134

Produtos afetados

Ibm Rational Clearcase

Ibm Installation Manager

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-6134 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21688450 · Aviso do Fabricante