CVE-2014-6221

The MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7 does not properly generate random numbers, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.

Score

CVSS 2.0 9.4 Critical

Status

Modified - psirt@us.ibm.com

Published

2015-04-06

Last modified

2024-08-06

Weaknesses

CWE-310

Affected products

• Rational Clearcase (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21698893
• http://www.securityfocus.com/bid/73915
• http://www.securitytracker.com/id/1032026