Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2014-0842

Overview

Vulnerability Score 5.0 5.0
CVE Id CVE-2014-0842
Last Modified 26 Feb 2014 11:07:11
Published 25 Feb 2014 08:29:36
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact NONE NONE
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2014-0842

Summary

The account-creation functionality in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 places the new user's default password within the creation page, which allows remote attackers to obtain sensitive information by reading the HTML source code.

Vulnerable Systems

Application

  • Ibm Rational Focal Point 6.4

  • Ibm Rational Focal Point 6.4.0.1

  • Ibm Rational Focal Point 6.4.1.0

  • Ibm Rational Focal Point 6.4.1.1

  • Ibm Rational Focal Point 6.4.1.2

  • Ibm Rational Focal Point 6.4.1.3

  • Ibm Rational Focal Point 6.5

  • Ibm Rational Focal Point 6.5.0.1

  • Ibm Rational Focal Point 6.5.0.2

  • Ibm Rational Focal Point 6.5.1

  • Ibm Rational Focal Point 6.5.1.1

  • Ibm Rational Focal Point 6.5.2

  • Ibm Rational Focal Point 6.5.2.1

  • Ibm Rational Focal Point 6.5.2.2

  • Ibm Rational Focal Point 6.5.2.3

  • Ibm Rational Focal Point 6.6

  • Ibm Rational Focal Point 6.6.0.1


References

XF - ibm-focalpoint-cve20140842-default-pw(90706)

CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21665005


Last Updated: 27 May 2016 10:55:15