CVE-2014-6134

IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation Manager before 1.8.2 is used, retains cleartext server passwords in process memory throughout the installation procedure, which might allow local users to obtain sensitive information by leveraging access to the installation account.
Configurations

Configuration 1 (hide)

cpe:2.3:a:ibm:installation_manager:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:ibm:rational_clearcase:8.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_clearcase:8.0.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_clearcase:8.0.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_clearcase:8.0.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_clearcase:8.0.0.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_clearcase:8.0.0.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_clearcase:8.0.0.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_clearcase:8.0.0.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_clearcase:8.0.0.8:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_clearcase:8.0.0.9:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_clearcase:8.0.0.10:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_clearcase:8.0.0.11:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_clearcase:8.0.0.12:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_clearcase:8.0.0.13:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_clearcase:8.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_clearcase:8.0.1.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_clearcase:8.0.1.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_clearcase:8.0.1.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_clearcase:8.0.1.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_clearcase:8.0.1.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:rational_clearcase:8.0.1.6:*:*:*:*:*:*:*

History

21 Nov 2024, 02:13

Type Values Removed Values Added
References () http://www-01.ibm.com/support/docview.wss?uid=swg21688450 - Patch, Vendor Advisory () http://www-01.ibm.com/support/docview.wss?uid=swg21688450 - Patch, Vendor Advisory

Information

Published : 2015-03-25 01:59

Updated : 2024-11-21 02:13


NVD link : CVE-2014-6134

Mitre link : CVE-2014-6134

CVE.ORG link : CVE-2014-6134


JSON object : View

Products Affected

ibm

  • installation_manager
  • rational_clearcase
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor