PT-2015-3817

CVE-2014-6134

·

Published

2015-03-25

·

Updated

2015-03-25

Description by

CVSS 2.0
1.2
Low
MetricsAV:L/AC:H/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions IBM Rational ClearCase versions 8.0.0 through 8.0.0.13 IBM Rational ClearCase versions 8.0.1 through 8.0.1.6
Description The issue allows local users to potentially obtain sensitive information by accessing the installation account, due to the retention of cleartext server passwords in process memory during the installation procedure when using Installation Manager before version 1.8.2.
Recommendations For IBM Rational ClearCase versions 8.0.0 through 8.0.0.13, update to version 8.0.0.14 or later. For IBM Rational ClearCase versions 8.0.1 through 8.0.1.6, update to version 8.0.1.7 or later. As a temporary workaround, consider restricting access to the installation account to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Related identifiers
CVE-2014-6134
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com