Vulnerability Description
The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0 before iFix002, includes the cleartext root password, which allows local users to obtain sensitive information by reading a library file.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Rational Directory Administrator | 6.0 |
| Ibm | Rational Directory Server | 5.1.1 |
Related Weaknesses (CWE)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21681554Vendor Advisory
- http://www.securityfocus.com/bid/69300
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94255
- http://www-01.ibm.com/support/docview.wss?uid=swg21681554Vendor Advisory
- http://www.securityfocus.com/bid/69300
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94255
FAQ
What is CVE-2014-3089?
CVE-2014-3089 is a vulnerability with a CVSS score of 4.9 (MEDIUM). The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0 before iFix002, include...
How severe is CVE-2014-3089?
CVE-2014-3089 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-3089?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Rational Directory Administrator, Ibm Rational Directory Server.