CVE-2014-6134: Infoleak
IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation Manager before 1.8.2 is used, retains cleartext server passwords in process memory throughout the installation procedure, which might allow local users to obtain sensitive information by leveraging access to the installation account.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-6134?
CVE-2014-6134 has a medium severity level as it exposes cleartext server passwords in process memory.
How do I fix CVE-2014-6134?
To fix CVE-2014-6134, upgrade IBM Rational ClearCase to version 8.0.0.14 or 8.0.1.7 and ensure Installation Manager is updated to at least version 1.8.2.
What software is affected by CVE-2014-6134?
CVE-2014-6134 affects IBM Rational ClearCase versions 8.0.0 through 8.0.0.13 and 8.0.1 through 8.0.1.6 when Installation Manager versions up to 1.8.1.0 are used.
What type of vulnerability is CVE-2014-6134?
CVE-2014-6134 is an information disclosure vulnerability due to the retention of cleartext passwords in memory.
Who can exploit CVE-2014-6134?
Local users with access to the system can exploit CVE-2014-6134 to obtain sensitive information.