| Package | Affected versions | Patched versions |
|---|---|---|
| installation manager | ≤ 1.8.1.0 | |
| rational clearcase | = 8.0.0= 8.0.0.1= 8.0.0.10= 8.0.0.11= 8.0.0.12= 8.0.0.13= 8.0.0.2= 8.0.0.3= 8.0.0.4= 8.0.0.5= 8.0.0.6= 8.0.0.7= 8.0.0.8= 8.0.0.9= 8.0.1= 8.0.1.1= 8.0.1.2= 8.0.1.3= 8.0.1.4= 8.0.1.5= 8.0.1.6 |
IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation Manager before 1.8.2 is used, retains cleartext server passwords in process memory throughout the installation procedure, which might allow local users to obtain sensitive information by leveraging access to the installation account.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free