CVE-2014-3089

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-08-22 · updated 2026-06-17
Weakness: CWE-310

Description

The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0 before iFix002, includes the cleartext root password, which allows local users to obtain sensitive information by reading a library file.

Affected products

IBM Rational Directory Administrator: 6.0, 6.0.0.1
IBM Rational Directory Server: 5.1.1, 5.1.1.1, 5.1.1.2, 5.2, 5.2.0.1, 5.2.0.2 (+1)

References

http://www-01.ibm.com/support/docview.wss?uid=swg21681554
http://www.securityfocus.com/bid/69300
https://exchange.xforce.ibmcloud.com/vulnerabilities/94255
http://www-01.ibm.com/support/docview.wss?uid=swg21681554
http://www.securityfocus.com/bid/69300
https://exchange.xforce.ibmcloud.com/vulnerabilities/94255

Get alerted when CVE-2014-3089 or the next vulnerability affects your stack