IBM Rational Focal Point 6.4.0, 6.4.1, 6.5.1, 6.5.2, and 6.6.0 use a weak algorithm to hash passwords, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack. IBM X-Force ID: 90704.
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Rational_focal_point | Ibm | 6.4 (including) | 6.4 (including) |
| Rational_focal_point | Ibm | 6.4.1 (including) | 6.4.1 (including) |
| Rational_focal_point | Ibm | 6.5.1 (including) | 6.5.1 (including) |
| Rational_focal_point | Ibm | 6.5.2 (including) | 6.5.2 (including) |
| Rational_focal_point | Ibm | 6.6 (including) | 6.6 (including) |