Login Request a demo
Unscored severity · published Aug 22, 2014
CVE-2014-3089
The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0 before iFix002, includes the cleartext root password, which allows local users to obtain sensitive information by reading a library file.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RD
Rational Directory Administrator · Ibm
6.0; 6.0.0.1 · source: NVD
RD
Rational Directory Server · Ibm
5.1.1; 5.1.1.1; 5.1.1.2; 5.2; 5.2.0.1; 5.2.0.2; +1 more · source: NVD
Affected product
RD
Rational Directory Administrator
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3089
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3089
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21681554
www.securityfocus.com
http://www.securityfocus.com/bid/69300
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/94255