PT-2015-3841
CVE-2014-6221
·
تاريخ النشر
2015-04-06
·
تاريخ التحديث
2016-11-28
الوصف من
CVSS 2.0
9.4
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:N
Name of the Vulnerable Software and Affected Versions
IBM Rational ClearCase versions 7.1.2.x through 7.1.2.16
IBM Rational ClearCase versions 8.0.0.x through 8.0.0.13
IBM Rational ClearCase versions 8.0.1.x through 8.0.1.6
Description
The issue is related to the MSCAPI/MSCNG interface implementation in GSKit, which does not properly generate random numbers. This makes it easier for remote attackers to defeat cryptographic protection mechanisms.
Recommendations
For IBM Rational ClearCase versions 7.1.2.x through 7.1.2.16, update to version 7.1.2.17 or later.
For IBM Rational ClearCase versions 8.0.0.x through 8.0.0.13, update to version 8.0.0.14 or later.
For IBM Rational ClearCase versions 8.0.1.x through 8.0.1.6, update to version 8.0.1.7 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾