CVE-2014-3089
First published: Fri Aug 22 2014(Updated: )
The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0 before iFix002, includes the cleartext root password, which allows local users to obtain sensitive information by reading a library file.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Rational Directory Administrator | =6.0 | |
| IBM Rational Directory Administrator | =6.0.0.1 | |
| IBM Tivoli Directory Server | =5.1.1 | |
| IBM Tivoli Directory Server | =5.1.1.1 | |
| IBM Tivoli Directory Server | =5.1.1.2 | |
| IBM Tivoli Directory Server | =5.2 | |
| IBM Tivoli Directory Server | =5.2.0.1 | |
| IBM Tivoli Directory Server | =5.2.0.2 | |
| IBM Tivoli Directory Server | =5.2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-3089?
The severity of CVE-2014-3089 is considered high due to the exposure of sensitive information through cleartext root passwords.
How do I fix CVE-2014-3089?
To fix CVE-2014-3089, update IBM Rational Directory Server and Rational Directory Administrator to the latest iFix versions that address this vulnerability.
Who is affected by CVE-2014-3089?
CVE-2014-3089 affects users of IBM Rational Directory Server versions 5.1.1.x, 5.2.x, and Rational Directory Administrator 6.0 prior to the specified iFix releases.
What type of vulnerability is CVE-2014-3089?
CVE-2014-3089 is classified as a security vulnerability that exposes sensitive information due to improper handling of cleartext root passwords.
Can CVE-2014-3089 be exploited locally?
Yes, CVE-2014-3089 can be exploited locally by users who have access to the affected systems.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm rational directory administrator
- version/ibm rational directory administrator/6.0
- version/ibm rational directory administrator/6.0.0.1
- canonical/ibm tivoli directory server
- version/ibm tivoli directory server/5.1.1
- version/ibm tivoli directory server/5.1.1.1
- version/ibm tivoli directory server/5.1.1.2
- version/ibm tivoli directory server/5.2
- version/ibm tivoli directory server/5.2.0.1
- version/ibm tivoli directory server/5.2.0.2
- version/ibm tivoli directory server/5.2.1