CVE-2014-3089
Last modified
CVE-2014-3089 is a vulnerability of currently unknown severity. The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0 before iFix002, includes the cleartext root password, which allows local users to obtain sensitive information by reading a library file.. EPSS estimates a 0.38% chance of exploitation in the next 30 days.
Description
The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0 before iFix002, includes the cleartext root password, which allows local users to obtain sensitive information by reading a library file.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Rational Directory Administrator | 6.0 |
| Ibm | Rational Directory Administrator | 6.0.0.1 |
| Ibm | Rational Directory Server | 5.1.1 |
| Ibm | Rational Directory Server | 5.1.1.1 |
| Ibm | Rational Directory Server | 5.1.1.2 |
| Ibm | Rational Directory Server | 5.2 |
| Ibm | Rational Directory Server | 5.2.0.1 |
| Ibm | Rational Directory Server | 5.2.0.2 |
| Ibm | Rational Directory Server | 5.2.1 |
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21681554Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21681554Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-3089?
How severe is CVE-2014-3089?
How do I fix CVE-2014-3089?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-3083IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.35…
- CVE-2014-3084IBM Maximo Asset Management 6.1 through 6.5, 7.1 through 7.1…
- CVE-2014-3085systest.php on IBM GCM16 and GCM32 Global Console Manager sw…
- CVE-2014-3086Unspecified vulnerability in the IBM Java Virtual Machine, a…
- CVE-2014-3087callService.do in IBM Business Process Manager (BPM) 7.5 thr…
- CVE-2014-3088stconf.nsf in IBM Sametime Meeting Server 8.5.1 relies on th…
- CVE-2014-3090IBM Rational ClearCase 7.1 before 7.1.2.15, 8.0.0 before 8.0…
- CVE-2014-3091Cross-site scripting (XSS) vulnerability in IBM Security QRa…
- CVE-2014-3092IBM Jazz Team Server, as used in Rational Collaborative Life…
- CVE-2014-3093IBM PowerVC 1.2.0 before FP3 and 1.2.1 before FP2 uses clear…
- CVE-2014-3094Stack-based buffer overflow in IBM DB2 9.7 through FP9a, 9.8…
- CVE-2014-3095The SQL engine in IBM DB2 9.5 through FP10, 9.7 through FP9a…
Are you affected by CVE-2014-3089?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST