CVE-2015-1913

IBM Rational Test Virtualization Server Weak Password Hashing via MD5

Title source: llm
STIX 2.1

Description

Rational Test Control Panel in IBM Rational Test Workbench and Rational Test Virtualization Server 8.0.0.x before 8.0.0.5, 8.0.1.x before 8.0.1.6, 8.5.0.x before 8.5.0.4, 8.5.1.x before 8.5.1.5, 8.6.0.x before 8.6.0.4, and 8.7.0.x before 8.7.0.2 uses the MD5 algorithm for password hashing, which makes it easier for remote attackers to bypass authentication via unspecified vectors.

References (2)

Core 2
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21959298
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/75307

Scores

EPSS 0.0132
EPSS Percentile 67.7%

Details

CWE
CWE-310
Status published
Products (50)
ibm/rational_test_virtualization_server 8.0.0
ibm/rational_test_virtualization_server 8.0.0.1
ibm/rational_test_virtualization_server 8.0.0.2
ibm/rational_test_virtualization_server 8.0.0.3
ibm/rational_test_virtualization_server 8.0.0.4
ibm/rational_test_virtualization_server 8.0.1
ibm/rational_test_virtualization_server 8.0.1.1
ibm/rational_test_virtualization_server 8.0.1.2
ibm/rational_test_virtualization_server 8.0.1.3
ibm/rational_test_virtualization_server 8.0.1.4
... and 40 more
Published Jun 30, 2015
Tracked Since Feb 18, 2026