4.9

CVE-2014-3089

The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0 before iFix002, includes the cleartext root password, which allows local users to obtain sensitive information by reading a library file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Rational Directory Server Version 5.1.1
Ibm ≫ Rational Directory Server Version 5.1.1.1
Ibm ≫ Rational Directory Server Version 5.1.1.2
Ibm ≫ Rational Directory Server Version 5.2
Ibm ≫ Rational Directory Server Version 5.2.0.1
Ibm ≫ Rational Directory Server Version 5.2.0.2
Ibm ≫ Rational Directory Server Version 5.2.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.38% 0.292
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:C/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www-01.ibm.com/support/docview.wss?uid=swg21681554
Vendor Advisory
http://www.securityfocus.com/bid/69300
https://exchange.xforce.ibmcloud.com/vulnerabilities/94255