VULNERABILITY INTELLIGENCE
CVE-2014-6221
CVSS score9.4 HIGH
EPSS probability2.69%
CISA KEVNot currently listed
Published2015-04-06
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:N
Description
The MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7 does not properly generate random numbers, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.
Primary references
- psirt@us.ibm.com — Patch, Vendor Advisory
- psirt@us.ibm.com
- psirt@us.ibm.com
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108