Information disclosure in Ibm Rational Appscan Source
CVE-2014-6123
IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow local users to obtain sensitive credential information by reading installation logs.
Vulnerability class: Information Disclosure
EPSS: 0.003 (23.6th percentile) — read the EPSS interpretation.
Affected products
- Ibm Rational_appscan_source — versions 8.0.0.0, 8.0.0.1, 8.0.0.2
- Ibm Security_appscan_source — versions 8.6.0.0, 8.6.0.1, 8.6.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)