Multiple IBM Products GSKit CVE-2014-6221 Random Data Generation Security Weakness
BID:73915
Info
Multiple IBM Products GSKit CVE-2014-6221 Random Data Generation Security Weakness
| Bugtraq ID: | 73915 |
| Class: | Design Error |
| CVE: |
CVE-2014-6221 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 18 2015 12:00AM |
| Updated: | Oct 11 2018 05:00AM |
| Credit: | IBM |
| Vulnerable: |
IBM WebSphere MQ 7.0.1 IBM WebSphere MQ 8.0.0.0 IBM WebSphere MQ 7.5 IBM WebSphere MQ 7.1 IBM Tivoli Workload Scheduler Distributed 9.2 IBM Tivoli Workload Scheduler Distributed 8.6 IBM Tivoli Workload Scheduler Distributed 8.5.1 FP04 IBM Tivoli Workload Scheduler Distributed 8.5.1 IBM Tivoli Workload Scheduler Distributed 8.5 IBM Tivoli Workload Scheduler Distributed 9.2.0 FP01 IBM Tivoli Workload Scheduler Distributed 9.1.0 FP01 IBM Tivoli Workload Scheduler Distributed 9.1 IBM Tivoli Workload Scheduler Distributed 8.6.0 FP03 IBM Tivoli Workload Scheduler Distributed 8.6 FP02 IBM Tivoli Workload Scheduler Distributed 8.5.1 FP05 IBM Tivoli Workload Scheduler Distributed 8.5 FP04 IBM Tivoli Workload Scheduler Distributed 8.5 FP03 IBM Tivoli Access Manager for e-business 6.1.1 IBM Tivoli Access Manager for e-business 6.1 IBM Tivoli Access Manager for e-business 6.0 IBM SPSS Modeler 17.0 IBM SPSS Modeler 16.0 IBM Smart Analytics System 7710 0 IBM Smart Analytics System 7700 0 IBM Smart Analytics System 7600 0 IBM Smart Analytics System 5710 0 IBM Smart Analytics System 5600 0 IBM Smart Analytics System 2050 0 IBM Smart Analytics System 1050 0 IBM Security Access Manager For Web 8.0 Firmware 8.0 3 IBM Security Access Manager For Web 8.0 Firmware 8.0.0.5 IBM Security Access Manager For Web 8.0 Firmware 8.0.0.4 IBM Security Access Manager For Web 8.0 Firmware 8.0.0.2 IBM Security Access Manager for Web 8.0.1.0 IBM Security Access Manager for Web 7.0 IBM Security Access Manager for Mobile 8.0.1 IBM Security Access Manager for Mobile 8.0.0.5 IBM Security Access Manager for Mobile 8.0.0.4 IBM Security Access Manager for Mobile 8.0.0.3 IBM Security Access Manager for Mobile 8.0.0.1 IBM Rational DOORS 9.5.2 IBM Rational DOORS 9.5.1 2 IBM Rational DOORS 9.5.1 1 IBM Rational DOORS 9.5.1 IBM Rational DOORS 9.5 1 IBM Rational DOORS 9.4 1 IBM Rational DOORS 9.3 7 IBM Rational DOORS 9.3 6 IBM Rational DOORS 9.3 5 IBM Rational DOORS 9.3 4 IBM Rational DOORS 9.3 3 IBM Rational DOORS 9.3 2 IBM Rational DOORS 9.3 1 IBM Rational DOORS 9.6.1.1 IBM Rational DOORS 9.6.1.0 IBM Rational DOORS 9.6.0.2 IBM Rational DOORS 9.6.0.1 IBM Rational DOORS 9.6 IBM Rational DOORS 9.5.2.3 IBM Rational DOORS 9.5.2.2 IBM Rational DOORS 9.5.2.1 IBM Rational DOORS 9.5.1.4 IBM Rational DOORS 9.5.1.3 IBM Rational DOORS 9.5.0.3 IBM Rational DOORS 9.5.0.2 IBM Rational DOORS 9.5 IBM Rational DOORS 9.4.0.3 IBM Rational DOORS 9.4.0.2 IBM Rational DOORS 9.4 IBM Rational DOORS 9.3.0.9 IBM Rational DOORS 9.3.0.8 IBM Rational DOORS 9.3 IBM Rational ClearCase 8.0.1 3 IBM Rational ClearCase 8.0.1 IBM Rational ClearCase 8.0 7 IBM Rational ClearCase 8.0 10 IBM Rational ClearCase 7.1.2 13 IBM Rational ClearCase 7.1.2 12 IBM Rational ClearCase 7.1.2 11 IBM Rational ClearCase 7.1.2 10 IBM Rational ClearCase 8.0.1.6 IBM Rational ClearCase 8.0.1.5 IBM Rational ClearCase 8.0.1.4 IBM Rational ClearCase 8.0.1.2 IBM Rational ClearCase 8.0.1.1 IBM Rational ClearCase 8.0.0.9 IBM Rational ClearCase 8.0.0.8 IBM Rational ClearCase 8.0.0.6 IBM Rational ClearCase 8.0.0.5 IBM Rational ClearCase 8.0.0.4 IBM Rational ClearCase 8.0.0.13 IBM Rational ClearCase 8.0.0.12 IBM Rational ClearCase 8.0.0.11 IBM Rational ClearCase 8.0.0.07 IBM Rational ClearCase 8.0.0.03 IBM Rational ClearCase 7.1.2.9 IBM Rational ClearCase 7.1.2.16 IBM Rational ClearCase 7.1.2.15 IBM Rational ClearCase 7.1.2.14 IBM PureData System for Operational Analytics 1.0 (A1791) IBM MQ Appliance M2000 IBM InfoSphere Balanced Warehouse C4000 IBM InfoSphere Balanced Warehouse C3000 IBM GSKit 0 IBM DB2 Workgroup Server Edition 9.7 IBM DB2 Workgroup Server Edition 9.5 IBM DB2 Workgroup Server Edition 10.5 IBM DB2 Workgroup Server Edition 10.1 IBM DB2 pureScale Feature for Enterprise Server Edition 9.8 IBM DB2 Express Edition 9.7 IBM DB2 Express Edition 9.5 IBM DB2 Express Edition 10.5 IBM DB2 Express Edition 10.1 IBM DB2 Enterprise Server Edition 9.7 IBM DB2 Enterprise Server Edition 9.5 IBM DB2 Enterprise Server Edition 10.5 IBM DB2 Enterprise Server Edition 10.1 IBM DB2 Connect Unlimited Edition for System z 9.7 IBM DB2 Connect Unlimited Edition for System z 9.5 IBM DB2 Connect Unlimited Edition for System z 10.5 IBM DB2 Connect Unlimited Edition for System z 10.1 IBM DB2 Connect Unlimited Edition for System i 9.7 IBM DB2 Connect Unlimited Edition for System i 9.5 IBM DB2 Connect Unlimited Edition for System i 10.5 IBM DB2 Connect Unlimited Edition for System i 10.1 IBM DB2 Connect Enterprise Edition 9.7 IBM DB2 Connect Enterprise Edition 9.5 IBM DB2 Connect Enterprise Edition 10.5 IBM DB2 Connect Enterprise Edition 10.1 IBM DB2 Connect Application Server Edition 9.7 IBM DB2 Connect Application Server Edition 9.5 IBM DB2 Connect Application Server Edition 10.5 IBM DB2 Connect Application Server Edition 10.1 IBM DB2 Advanced Workgroup Server Edition 9.7 IBM DB2 Advanced Workgroup Server Edition 9.5 IBM DB2 Advanced Workgroup Server Edition 10.5 IBM DB2 Advanced Workgroup Server Edition 10.1 IBM DB2 Advanced Enterprise Server Edition 9.7 IBM DB2 Advanced Enterprise Server Edition 9.5 IBM DB2 Advanced Enterprise Server Edition 10.5 IBM DB2 Advanced Enterprise Server Edition 10.1 |
| Not Vulnerable: |
IBM Rational ClearCase 8.0.1.7 IBM Rational ClearCase 8.0.0.14 IBM Rational ClearCase 7.1.2.17 IBM DB2 Workgroup Server Edition 9.7 FP11 IBM DB2 Workgroup Server Edition 10.5 FP6 IBM DB2 Workgroup Server Edition 10.1 FP5 IBM DB2 Express Edition 9.7 FP11 IBM DB2 Express Edition 10.5 FP6 IBM DB2 Express Edition 10.1 FP5 IBM DB2 Enterprise Server Edition 9.7 FP11 IBM DB2 Enterprise Server Edition 10.5 FP6 IBM DB2 Enterprise Server Edition 10.1 FP5 IBM DB2 Connect Unlimited Edition for System z 9.7 FP11 IBM DB2 Connect Unlimited Edition for System z 10.5 FP6 IBM DB2 Connect Unlimited Edition for System z 10.1 FP5 IBM DB2 Connect Unlimited Edition for System i 9.7 FP11 IBM DB2 Connect Unlimited Edition for System i 10.5 FP6 IBM DB2 Connect Unlimited Edition for System i 10.1 FP5 IBM DB2 Connect Enterprise Edition 9.7 FP11 IBM DB2 Connect Enterprise Edition 10.5 FP6 IBM DB2 Connect Enterprise Edition 10.1 FP5 IBM DB2 Connect Application Server Edition 9.7 FP11 IBM DB2 Connect Application Server Edition 10.5 FP6 IBM DB2 Connect Application Server Edition 10.1 FP5 IBM DB2 Advanced Workgroup Server Edition 9.7 FP11 IBM DB2 Advanced Workgroup Server Edition 10.5 FP6 IBM DB2 Advanced Workgroup Server Edition 10.1 FP5 IBM DB2 Advanced Enterprise Server Edition 9.7 FP11 IBM DB2 Advanced Enterprise Server Edition 10.5 FP6 IBM DB2 Advanced Enterprise Server Edition 10.1 FP5 |
Discussion
Multiple IBM Products GSKit CVE-2014-6221 Random Data Generation Security Weakness
Multiple IBM products are prone to a security weakness.
An attacker can exploit this weakness to defeat cryptographic protection mechanisms which may aid in further attacks.
Multiple IBM products are prone to a security weakness.
An attacker can exploit this weakness to defeat cryptographic protection mechanisms which may aid in further attacks.
Exploit / POC
Multiple IBM Products GSKit CVE-2014-6221 Random Data Generation Security Weakness
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Multiple IBM Products GSKit CVE-2014-6221 Random Data Generation Security Weakness
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Multiple IBM Products GSKit CVE-2014-6221 Random Data Generation Security Weakness
References:
References:
- IBM Homepage (IBM)
- Rational ClearCase Homepage (IBM)
- IBM PureData System for Operational Analytics V1.0 (A1791) is affected by vulne (IBM)
- Security Bulletin: IBM InfoSphere Balanced Warehouse C3000, C4000, IBM Smart Ana (IBM)
- Security Bulletin: Vulnerabilities in GSKit affect IBM Rational ClearCase (CVE-2 (IBM)
- Security Bulletin: Vulnerabilities in GSKit affect IBM Security Access Manager f (IBM)
- Security Bulletin: Vulnerabilities in GSKit affect IBM Security Access Manager f (IBM)
- Security Bulletin: Vulnerabilities in GSKit affect IBM SPSS Modeler (CVE-2015-01 (IBM)
- Security Bulletin: Vulnerabilities in GSKit affect IBM WebSphere MQ (CVE-2015-01 (IBM)
- Security Bulletin: Vulnerabilities in GSKit affect Rational DOORS (CVE-2015-0138 (IBM)
- Security Bulletin: Vulnerabilities in GSKit affect Tivoli Workload Scheduler (CV (IBM)
- Vulnerabilities in GSKit affect IBM DB2 (CVE-2015-0138, CVE-2015-0159 and CVE-20 (IBM)