CVE Vulnerabilities

CVE-2014-3101

Improper Authentication

Published: Sep 23, 2014 | Modified: Aug 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote attackers to obtain access via a brute-force attack.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Rational_clearcase Ibm 7.1 (including) 7.1 (including)
Rational_clearcase Ibm 7.1.0.1 (including) 7.1.0.1 (including)
Rational_clearcase Ibm 7.1.0.2 (including) 7.1.0.2 (including)
Rational_clearcase Ibm 7.1.1 (including) 7.1.1 (including)
Rational_clearcase Ibm 7.1.1.1 (including) 7.1.1.1 (including)
Rational_clearcase Ibm 7.1.1.2 (including) 7.1.1.2 (including)
Rational_clearcase Ibm 7.1.1.3 (including) 7.1.1.3 (including)
Rational_clearcase Ibm 7.1.1.4 (including) 7.1.1.4 (including)
Rational_clearcase Ibm 7.1.1.5 (including) 7.1.1.5 (including)
Rational_clearcase Ibm 7.1.1.6 (including) 7.1.1.6 (including)
Rational_clearcase Ibm 7.1.1.7 (including) 7.1.1.7 (including)
Rational_clearcase Ibm 7.1.1.8 (including) 7.1.1.8 (including)
Rational_clearcase Ibm 7.1.1.9 (including) 7.1.1.9 (including)
Rational_clearcase Ibm 7.1.2 (including) 7.1.2 (including)
Rational_clearcase Ibm 7.1.2.1 (including) 7.1.2.1 (including)
Rational_clearcase Ibm 7.1.2.2 (including) 7.1.2.2 (including)
Rational_clearcase Ibm 7.1.2.3 (including) 7.1.2.3 (including)
Rational_clearcase Ibm 7.1.2.4 (including) 7.1.2.4 (including)
Rational_clearcase Ibm 7.1.2.5 (including) 7.1.2.5 (including)
Rational_clearcase Ibm 7.1.2.6 (including) 7.1.2.6 (including)
Rational_clearcase Ibm 7.1.2.7 (including) 7.1.2.7 (including)
Rational_clearcase Ibm 7.1.2.9 (including) 7.1.2.9 (including)
Rational_clearcase Ibm 7.1.2.10 (including) 7.1.2.10 (including)
Rational_clearcase Ibm 7.1.2.11 (including) 7.1.2.11 (including)
Rational_clearcase Ibm 7.1.2.12 (including) 7.1.2.12 (including)
Rational_clearcase Ibm 7.1.2.13 (including) 7.1.2.13 (including)
Rational_clearcase Ibm 7.1.2.14 (including) 7.1.2.14 (including)
Rational_clearcase Ibm 8.0 (including) 8.0 (including)
Rational_clearcase Ibm 8.0.0.1 (including) 8.0.0.1 (including)
Rational_clearcase Ibm 8.0.0.2 (including) 8.0.0.2 (including)
Rational_clearcase Ibm 8.0.0.3 (including) 8.0.0.3 (including)
Rational_clearcase Ibm 8.0.0.4 (including) 8.0.0.4 (including)
Rational_clearcase Ibm 8.0.0.5 (including) 8.0.0.5 (including)
Rational_clearcase Ibm 8.0.0.6 (including) 8.0.0.6 (including)
Rational_clearcase Ibm 8.0.0.7 (including) 8.0.0.7 (including)
Rational_clearcase Ibm 8.0.0.8 (including) 8.0.0.8 (including)
Rational_clearcase Ibm 8.0.0.9 (including) 8.0.0.9 (including)
Rational_clearcase Ibm 8.0.0.10 (including) 8.0.0.10 (including)
Rational_clearcase Ibm 8.0.0.11 (including) 8.0.0.11 (including)
Rational_clearcase Ibm 8.0.1 (including) 8.0.1 (including)
Rational_clearcase Ibm 8.0.1.1 (including) 8.0.1.1 (including)
Rational_clearcase Ibm 8.0.1.2 (including) 8.0.1.2 (including)
Rational_clearcase Ibm 8.0.1.3 (including) 8.0.1.3 (including)
Rational_clearcase Ibm 8.0.1.4 (including) 8.0.1.4 (including)

Potential Mitigations

References