Vulnerability in Ibm Rational Clearcase
CVE-2014-6221
The MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7 does not properly generate random numbers, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.027 (84.3th percentile) — read the EPSS interpretation.
Affected products
- Ibm Rational_clearcase — versions 7.1.2, 7.1.2.1, 7.1.2.2
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@us.ibm.com (vdb-entry, x_refsource_BID)
- psirt@us.ibm.com (vdb-entry, x_refsource_SECTRACK)