CVE-2014-3089

Published: Aug 22, 2014Modified: May 6, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:C/I:N/A:N

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0 before iFix002, includes the cleartext root password, which allows local users to obtain sensitive information by reading a library file.

Affected (9)

Products: Ibm: Rational Directory Administrator, Rational Directory Server

Ibm

2 products

Rational Directory Administrator

Rational Directory Server

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Directory Administrator	Version 6.0.0.1
Ibm Rational Directory Administrator	Version 6.0
Ibm Rational Directory Server	Version 5.1.1.1
Ibm Rational Directory Server	Version 5.1.1.2
Ibm Rational Directory Server	Version 5.1.1
Ibm Rational Directory Server	Version 5.2.0.1
Ibm Rational Directory Server	Version 5.2.0.2
Ibm Rational Directory Server	Version 5.2.1
Ibm Rational Directory Server	Version 5.2