IBM Rational ClearCase CVE-2014-6134 Local Information Disclosure Vulnerability

Bugtraq ID:	73281
Class:	Design Error
CVE:	CVE-2014-6134
Remote:	No
Local:	Yes
Published:	Mar 18 2015 12:00AM
Updated:	Mar 18 2015 12:00AM
Credit:	IBM
Vulnerable:	IBM Rational ClearCase 8.0.1 3 IBM Rational ClearCase 8.0.1 IBM Rational ClearCase 8.0 7 IBM Rational ClearCase 8.0 3 IBM Rational ClearCase 8.0 2 IBM Rational ClearCase 8.0 10 IBM Rational ClearCase 8.0 1 IBM Rational ClearCase 8.0.1.6 IBM Rational ClearCase 8.0.1.5 IBM Rational ClearCase 8.0.1.4 IBM Rational ClearCase 8.0.1.2 IBM Rational ClearCase 8.0.1.1 IBM Rational ClearCase 8.0.0.9 IBM Rational ClearCase 8.0.0.8 IBM Rational ClearCase 8.0.0.6 IBM Rational ClearCase 8.0.0.5 IBM Rational ClearCase 8.0.0.4 IBM Rational ClearCase 8.0.0.13 IBM Rational ClearCase 8.0.0.12 IBM Rational ClearCase 8.0.0.11
Not Vulnerable:

IBM Rational ClearCase CVE-2014-6134 Local Information Disclosure Vulnerability

IBM Rational ClearCase is prone to a local information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.

IBM Rational ClearCase CVE-2014-6134 Local Information Disclosure Vulnerability

References:

• IBM Homepage (IBM)
  
• Rational ClearCase Homepage (IBM)
  
• Security Bulletin: ClearCase installer exposes server passwords in memory (CVE-2 (IBM)