Description
The MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7 does not properly generate random numbers, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.
References (3)
Core 3
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21698893
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/73915
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1032026
Scores
EPSS
0.0268
EPSS Percentile
84.3%
Details
CWE
CWE-310
Status
published
Products (37)
ibm/rational_clearcase
7.1.2
ibm/rational_clearcase
7.1.2.1
ibm/rational_clearcase
7.1.2.2
ibm/rational_clearcase
7.1.2.3
ibm/rational_clearcase
7.1.2.4
ibm/rational_clearcase
7.1.2.5
ibm/rational_clearcase
7.1.2.6
ibm/rational_clearcase
7.1.2.7
ibm/rational_clearcase
7.1.2.9
ibm/rational_clearcase
7.1.2.10
... and 27 more
Published
Apr 06, 2015
Tracked Since
Feb 18, 2026