First published: Mon Apr 06 2015(Updated: )
The MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7 does not properly generate random numbers, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Rational ClearCase | =7.1.2 | |
IBM Rational ClearCase | =7.1.2.1 | |
IBM Rational ClearCase | =7.1.2.2 | |
IBM Rational ClearCase | =7.1.2.3 | |
IBM Rational ClearCase | =7.1.2.4 | |
IBM Rational ClearCase | =7.1.2.5 | |
IBM Rational ClearCase | =7.1.2.6 | |
IBM Rational ClearCase | =7.1.2.7 | |
IBM Rational ClearCase | =7.1.2.9 | |
IBM Rational ClearCase | =7.1.2.10 | |
IBM Rational ClearCase | =7.1.2.11 | |
IBM Rational ClearCase | =7.1.2.12 | |
IBM Rational ClearCase | =7.1.2.13 | |
IBM Rational ClearCase | =7.1.2.14 | |
IBM Rational ClearCase | =7.1.2.15 | |
IBM Rational ClearCase | =7.1.2.16 | |
IBM Rational ClearCase | =8.0.0 | |
IBM Rational ClearCase | =8.0.0.1 | |
IBM Rational ClearCase | =8.0.0.2 | |
IBM Rational ClearCase | =8.0.0.3 | |
IBM Rational ClearCase | =8.0.0.4 | |
IBM Rational ClearCase | =8.0.0.5 | |
IBM Rational ClearCase | =8.0.0.6 | |
IBM Rational ClearCase | =8.0.0.7 | |
IBM Rational ClearCase | =8.0.0.8 | |
IBM Rational ClearCase | =8.0.0.9 | |
IBM Rational ClearCase | =8.0.0.10 | |
IBM Rational ClearCase | =8.0.0.11 | |
IBM Rational ClearCase | =8.0.0.12 | |
IBM Rational ClearCase | =8.0.0.13 | |
IBM Rational ClearCase | =8.0.1 | |
IBM Rational ClearCase | =8.0.1.1 | |
IBM Rational ClearCase | =8.0.1.2 | |
IBM Rational ClearCase | =8.0.1.3 | |
IBM Rational ClearCase | =8.0.1.4 | |
IBM Rational ClearCase | =8.0.1.5 | |
IBM Rational ClearCase | =8.0.1.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-6221 has a medium severity rating due to its potential impact on cryptographic protection mechanisms.
To fix CVE-2014-6221, users should upgrade to IBM Rational ClearCase version 7.1.2.17 or higher, 8.0.0.14 or higher, or 8.0.1.7 or higher.
The affected versions for CVE-2014-6221 include IBM Rational ClearCase 7.1.2.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7.
CVE-2014-6221 is a cryptographic vulnerability related to improper random number generation.
Organizations using vulnerable versions of IBM Rational ClearCase are at risk if they have not applied the necessary patches.