{"api_version":"1","generated_at":"2026-07-23T06:06:01+00:00","cve":"CVE-2014-3089","urls":{"html":"https://cve.report/CVE-2014-3089","api":"https://cve.report/api/cve/CVE-2014-3089.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2014-3089","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-3089"},"summary":{"title":"CVE-2014-3089","description":"The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0 before iFix002, includes the cleartext root password, which allows local users to obtain sensitive information by reading a library file.","state":"PUBLISHED","assigner":"ibm","published_at":"2014-08-22 01:55:08","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-310","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.9","severity":"","vector":"AV:L/AC:L/Au:N/C:C/I:N/A:N","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/69300","name":"http://www.securityfocus.com/bid/69300","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM Rational Directory Server CVE-2014-3089 Local Information Disclosure Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21681554","name":"http://www-01.ibm.com/support/docview.wss?uid=swg21681554","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Security Bulletin: Critical Security Vulnerability in Rational Directory Server (Tivoli and Apache) (CVE-2014-3089)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/94255","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/94255","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3089","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3089","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2014","cve_id":"3089","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"rational_directory_administrator","cpe6":"6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3089","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"rational_directory_administrator","cpe6":"6.0.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3089","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"rational_directory_server","cpe6":"5.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3089","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"rational_directory_server","cpe6":"5.1.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3089","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"rational_directory_server","cpe6":"5.1.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3089","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"rational_directory_server","cpe6":"5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3089","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"rational_directory_server","cpe6":"5.2.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3089","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"rational_directory_server","cpe6":"5.2.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"3089","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"rational_directory_server","cpe6":"5.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T10:35:55.942Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21681554"},{"name":"ibm-rds-cve20143089-cleartext(94255)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/94255"},{"name":"69300","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/69300"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2014-08-19T00:00:00.000Z","descriptions":[{"lang":"en","value":"The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0 before iFix002, includes the cleartext root password, which allows local users to obtain sensitive information by reading a library file."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","shortName":"ibm"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21681554"},{"name":"ibm-rds-cve20143089-cleartext(94255)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/94255"},{"name":"69300","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/69300"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","ID":"CVE-2014-3089","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0 before iFix002, includes the cleartext root password, which allows local users to obtain sensitive information by reading a library file."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21681554","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21681554"},{"name":"ibm-rds-cve20143089-cleartext(94255)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/94255"},{"name":"69300","refsource":"BID","url":"http://www.securityfocus.com/bid/69300"}]}}}},"cveMetadata":{"assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","assignerShortName":"ibm","cveId":"CVE-2014-3089","datePublished":"2014-08-22T01:00:00.000Z","dateReserved":"2014-04-29T00:00:00.000Z","dateUpdated":"2024-08-06T10:35:55.942Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2014-08-22 01:55:08","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-310","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:N/A:N","baseScore":4.9,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_directory_administrator:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A3133BA9-2C59-498D-B86B-235F383D2CD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_directory_administrator:6.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0EE3A640-291B-4D9A-9D36-A48D10965278"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_directory_server:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"863115B5-B43A-4926-957F-3D0518CB8E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_directory_server:5.1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"993B628A-3C52-461A-A507-A40BE4C823DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_directory_server:5.1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B666029A-3701-4E2B-BFF9-392AE50CED2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_directory_server:5.2:*:*:*:*:*:*:*","matchCriteriaId":"3279036F-BE1A-44FD-AF4C-9C61A1F165D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_directory_server:5.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BE5852C2-A255-427B-A27F-ED792DA8FB9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_directory_server:5.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"950DD182-C8EE-45B8-A32E-213CFC26DCEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_directory_server:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EE944B72-F1C2-48B3-82D8-FF21938B53B4"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2014","CveId":"3089","Ordinal":"1","Title":"CVE-2014-3089","CVE":"CVE-2014-3089","Year":"2014"},"notes":[{"CveYear":"2014","CveId":"3089","Ordinal":"1","NoteData":"The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0 before iFix002, includes the cleartext root password, which allows local users to obtain sensitive information by reading a library file.","Type":"Description","Title":"CVE-2014-3089"},{"CveYear":"2014","CveId":"3089","Ordinal":"2","NoteData":"2014-08-21","Type":"Other","Title":"Published"},{"CveYear":"2014","CveId":"3089","Ordinal":"3","NoteData":"2017-08-28","Type":"Other","Title":"Modified"}]}}}