CVE-2014-3089

Name of the Vulnerable Software and Affected Versions IBM Rational Directory Server versions 5.1.1.x through 5.1.1.2 iFix003 IBM Rational Directory Server versions 5.2.x through 5.2.1 iFix002 Rational Directory Administrator version 6.0 through iFix001

Description The issue allows local users to obtain sensitive information by reading a library file, as the RDS Java Client library includes the cleartext root password.

Recommendations For IBM Rational Directory Server versions 5.1.1.x through 5.1.1.2 iFix003, update to version 5.1.1.2 iFix004 or later. For IBM Rational Directory Server versions 5.2.x through 5.2.1 iFix002, update to version 5.2.1 iFix003 or later. For Rational Directory Administrator version 6.0 through iFix001, update to version 6.0 iFix002 or later.