CVE-2014-3089: Medium severity ibm rational directory administrator vulnerability
The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0 before iFix002, includes the cleartext root password, which allows local users to obtain sensitive information by reading a library file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3089?
The severity of CVE-2014-3089 is considered high due to the exposure of sensitive information through cleartext root passwords.
How do I fix CVE-2014-3089?
To fix CVE-2014-3089, update IBM Rational Directory Server and Rational Directory Administrator to the latest iFix versions that address this vulnerability.
Who is affected by CVE-2014-3089?
CVE-2014-3089 affects users of IBM Rational Directory Server versions 5.1.1.x, 5.2.x, and Rational Directory Administrator 6.0 prior to the specified iFix releases.
What type of vulnerability is CVE-2014-3089?
CVE-2014-3089 is classified as a security vulnerability that exposes sensitive information due to improper handling of cleartext root passwords.
Can CVE-2014-3089 be exploited locally?
Yes, CVE-2014-3089 can be exploited locally by users who have access to the affected systems.