VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 26, 2014· Updated Apr 29, 2026

CVE-2014-0842

CVE-2014-0842

Description

The account-creation functionality in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 places the new user's default password within the creation page, which allows remote attackers to obtain sensitive information by reading the HTML source code.

Affected products

17
  • IBM/Rational Focal Point17 versions
    cpe:2.3:a:ibm:rational_focal_point:6.4:*:*:*:*:*:*:*+ 16 more
    • cpe:2.3:a:ibm:rational_focal_point:6.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_focal_point:6.4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_focal_point:6.4.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_focal_point:6.4.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_focal_point:6.4.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_focal_point:6.4.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_focal_point:6.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_focal_point:6.5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_focal_point:6.5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_focal_point:6.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_focal_point:6.5.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_focal_point:6.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_focal_point:6.5.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_focal_point:6.5.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_focal_point:6.5.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_focal_point:6.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_focal_point:6.6.0.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.