VULNERABILITY INTELLIGENCE
CVE-2014-0842
CVSS score5 MEDIUM
EPSS probability1.17%
CISA KEVNot currently listed
Published2014-02-26
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
The account-creation functionality in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 places the new user's default password within the creation page, which allows remote attackers to obtain sensitive information by reading the HTML source code.
Primary references
- psirt@us.ibm.com — Patch, Vendor Advisory
- psirt@us.ibm.com
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108