PT-2015-3817 · Ibm · Ibm Rational Clearcase+1
Published
2015-03-25
·
Updated
2015-03-25
·
CVE-2014-6134
CVSS v2.0
1.2
Low
| Vector | AV:L/AC:H/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Rational ClearCase versions 8.0.0 through 8.0.0.13
IBM Rational ClearCase versions 8.0.1 through 8.0.1.6
Description
The issue allows local users to potentially obtain sensitive information by accessing the installation account, due to the retention of cleartext server passwords in process memory during the installation procedure when using Installation Manager before version 1.8.2.
Recommendations
For IBM Rational ClearCase versions 8.0.0 through 8.0.0.13, update to version 8.0.0.14 or later.
For IBM Rational ClearCase versions 8.0.1 through 8.0.1.6, update to version 8.0.1.7 or later.
As a temporary workaround, consider restricting access to the installation account to minimize the risk of exploitation.
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Rational Clearcase
Ibm Installation Manager