CVE-2014-6221

Опубликовано: 06 апр. 2015

Источник: nvd

CVSS2: 9.4

EPSS Низкий

Описание

The MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7 does not properly generate random numbers, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21698893
Patch
Vendor Advisory
http://www.securityfocus.com/bid/73915
http://www.securitytracker.com/id/1032026
http://www-01.ibm.com/support/docview.wss?uid=swg21698893
Patch
Vendor Advisory
http://www.securityfocus.com/bid/73915
http://www.securitytracker.com/id/1032026

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:rational_clearcase:7.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.9:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.10:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.11:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.12:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.13:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.14:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.15:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:7.1.2.16:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.9:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.10:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.11:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.12:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.0.13:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.1.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.1.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearcase:8.0.1.6:*:*:*:*:*:*:*

EPSS

Процентиль: 70%

0.00631

Низкий

9.4 Critical

CVSS2

Дефекты

CWE-310

Связанные уязвимости

GHSA-q86j-485g-vc49

github

больше 3 лет назад