CVE-2014-6123: Infoleak
First published: Mon Dec 29 2014(Updated: )
IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow local users to obtain sensitive credential information by reading installation logs.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HCL AppScan Source | =8.0.0.0 | |
| HCL AppScan Source | =8.0.0.1 | |
| HCL AppScan Source | =8.0.0.2 | |
| HCL AppScan Source | =8.5.0.0 | |
| HCL AppScan Source | =8.5.0.1 | |
| IBM Security AppScan | =8.6.0.0 | |
| IBM Security AppScan | =8.6.0.1 | |
| IBM Security AppScan | =8.6.0.2 | |
| IBM Security AppScan | =8.7.0.0 | |
| IBM Security AppScan | =8.7.0.1 | |
| IBM Security AppScan | =8.8 | |
| IBM Security AppScan | =9.0 | |
| IBM Security AppScan | =9.0.0.0 | |
| IBM Security AppScan | =9.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-6123?
CVE-2014-6123 is classified as a moderate severity vulnerability due to the risk of sensitive credential exposure.
How do I fix CVE-2014-6123?
To fix CVE-2014-6123, it's recommended to update to the latest version of HCL AppScan Source that addresses this vulnerability.
Who is affected by CVE-2014-6123?
CVE-2014-6123 affects users of IBM Rational AppScan Source and Security AppScan Source versions specified in the vulnerability details.
What type of information is exposed in CVE-2014-6123?
CVE-2014-6123 exposes sensitive credential information that can be found in installation logs by local users.
Is there a workaround for CVE-2014-6123?
Currently, there is no specific workaround for CVE-2014-6123 besides updating to a patched version of the software.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/hcl appscan source
- version/hcl appscan source/8.0.0.0
- version/hcl appscan source/8.0.0.1
- version/hcl appscan source/8.0.0.2
- version/hcl appscan source/8.5.0.0
- version/hcl appscan source/8.5.0.1
- canonical/ibm security appscan
- version/ibm security appscan/8.6.0.0
- version/ibm security appscan/8.6.0.1
- version/ibm security appscan/8.6.0.2
- version/ibm security appscan/8.7.0.0
- version/ibm security appscan/8.7.0.1
- version/ibm security appscan/8.8
- version/ibm security appscan/9.0
- version/ibm security appscan/9.0.0.0
- version/ibm security appscan/9.0.1