{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2014-02-20T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "The account-creation functionality in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 places the new user's default password within the creation page, which allows remote attackers to obtain sensitive information by reading the HTML source code."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-28T12:57:01.000Z", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21665005"}, {"name": "ibm-focalpoint-cve20140842-default-pw(90706)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90706"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "ID": "CVE-2014-0842", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The account-creation functionality in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 places the new user's default password within the creation page, which allows remote attackers to obtain sensitive information by reading the HTML source code."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www-01.ibm.com/support/docview.wss?uid=swg21665005", "refsource": "CONFIRM", "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21665005"}, {"name": "ibm-focalpoint-cve20140842-default-pw(90706)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90706"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T09:27:20.269Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21665005"}, {"name": "ibm-focalpoint-cve20140842-default-pw(90706)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90706"}]}]}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2014-0842", "datePublished": "2014-02-25T21:00:00.000Z", "dateReserved": "2014-01-06T00:00:00.000Z", "dateUpdated": "2024-08-06T09:27:20.269Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:rational_focal_point:6.4:*:*:*:*:*:*:*", "matchCriteriaId": "46577E1B-77E6-4FE6-8B1F-F2A61FB0C15F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_focal_point:6.4.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "30870B43-5757-43FC-BB10-DC0FD6996DFE", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_focal_point:6.4.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "44678DC6-2D43-412D-89E0-F92B89BE1FD5", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_focal_point:6.4.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "253B6795-4B4B-4CD0-97EB-ACD1587C497A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_focal_point:6.4.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "E7A94966-DD5E-490F-BDEE-2AEA9EECBFA5", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_focal_point:6.4.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "B52DB62D-5D12-4AE4-8A14-EA2782A92CA2", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_focal_point:6.5:*:*:*:*:*:*:*", "matchCriteriaId": "55D71481-7552-4BE7-9BD0-C45BC5AAC3D2", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_focal_point:6.5.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "12B184B3-679B-4F27-9168-142090F99333", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_focal_point:6.5.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "C1C89D96-8E49-4B4D-8D63-C240F5E9B439", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_focal_point:6.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "5BF5FBBF-750D-49FF-97E8-91E9D29D53DA", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_focal_point:6.5.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "08F0C674-068D-43F9-BADE-0707008FF47F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_focal_point:6.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "FD4F5963-909C-404E-AF58-885DBBC78FB2", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_focal_point:6.5.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "4F7B0657-4C0D-4CE7-8AB9-996EFF1DE4E2", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_focal_point:6.5.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "8C3CD52F-48BB-49AD-BF77-DC5762051950", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_focal_point:6.5.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "A872F738-296B-443F-B6E1-5B8200A05270", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_focal_point:6.6:*:*:*:*:*:*:*", "matchCriteriaId": "BDD57F9E-5569-4F38-8C1B-BF033498639E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_focal_point:6.6.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "794382A6-042F-4036-B7DA-702135B1BE51", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The account-creation functionality in IBM Rational Focal Point 6.4.x and 6.5.x before 6.5.2.3 and 6.6.x before 6.6.1 places the new user's default password within the creation page, which allows remote attackers to obtain sensitive information by reading the HTML source code."}, {"lang": "es", "value": "La funcionalidad account-creation en IBM Rational Focal Point 6.4.x y 6.5.x anterior a 6.5.2.3 y 6.6.x anterior a 6.6.1 coloca la contrase\u00f1a nueva por defecto del usuario dentro de la p\u00e1gina de creaci\u00f3n, lo que permite a atacantes remotos obtener informaci\u00f3n sensible mediante la lectura del c\u00f3digo fuente HTML."}], "id": "CVE-2014-0842", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2014-02-26T01:29:36.717", "references": [{"source": "psirt@us.ibm.com", "tags": ["Patch", "Vendor Advisory"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21665005"}, {"source": "psirt@us.ibm.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90706"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21665005"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90706"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-255"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}