cbcvebase.
CVE-2014-0842
published 2014-02-26

CVE-2014-0842: The account-creation functionality in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 places the new user's default password…

PriorityP421medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.17%
63.9th percentile
The account-creation functionality in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 places the new user's default password within the creation page, which allows remote attackers to obtain sensitive information by reading the HTML source code.

Affected

17 ranges
VendorProductVersion rangeFixed in
ibmrational_focal_point——
ibmrational_focal_point——
ibmrational_focal_point——
ibmrational_focal_point——
ibmrational_focal_point——
ibmrational_focal_point——
ibmrational_focal_point——
ibmrational_focal_point——
ibmrational_focal_point——
ibmrational_focal_point——
ibmrational_focal_point——
ibmrational_focal_point——
ibmrational_focal_point——
ibmrational_focal_point——
ibmrational_focal_point——
ibmrational_focal_point——
ibmrational_focal_point——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.