CVE-2014-3089

IBM Rational Directory Server 5.1.1.x-5.1.1.2, 5.2.x-5.2.1 & Administrator 6.0 - Cleartext Password Exposure

Title source: llm
STIX 2.1

Description

The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0 before iFix002, includes the cleartext root password, which allows local users to obtain sensitive information by reading a library file.

References (3)

Core 3
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21681554
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/94255
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/69300

Scores

EPSS 0.0038
EPSS Percentile 30.2%

Details

CWE
CWE-310
Status published
Products (9)
ibm/rational_directory_administrator 6.0
ibm/rational_directory_administrator 6.0.0.1
ibm/rational_directory_server 5.1.1
ibm/rational_directory_server 5.1.1.1
ibm/rational_directory_server 5.1.1.2
ibm/rational_directory_server 5.2
ibm/rational_directory_server 5.2.0.1
ibm/rational_directory_server 5.2.0.2
ibm/rational_directory_server 5.2.1
Published Aug 22, 2014
Tracked Since Feb 18, 2026