Vulnerability in Ibm Rational Focal Point
CVE-2014-0842
The account-creation functionality in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 places the new user's default password within the creation page, which allows remote attackers to obtain sensitive information by reading the HTML source code.
EPSS: 0.012 (64.3th percentile) — read the EPSS interpretation.
Affected products
- Ibm Rational_focal_point — versions 6.4, 6.4.0.1, 6.4.1.0
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)