CVE Vulnerabilities

CVE-2014-3101

Improper Authentication

Published: Sep 23, 2014 | Modified: Aug 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote attackers to obtain access via a brute-force attack.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Rational_clearcase Ibm 7.1.2.12 7.1.2.12
Rational_clearcase Ibm 8.0.0.10 8.0.0.10
Rational_clearcase Ibm 7.1.1.8 7.1.1.8
Rational_clearcase Ibm 7.1.2.10 7.1.2.10
Rational_clearcase Ibm 8.0.0.11 8.0.0.11
Rational_clearcase Ibm 8.0.1.4 8.0.1.4
Rational_clearcase Ibm 8.0.1.2 8.0.1.2
Rational_clearcase Ibm 7.1.1.3 7.1.1.3
Rational_clearcase Ibm 7.1.2 7.1.2
Rational_clearcase Ibm 8.0.0.1 8.0.0.1
Rational_clearcase Ibm 7.1.1.6 7.1.1.6
Rational_clearcase Ibm 8.0.1.3 8.0.1.3
Rational_clearcase Ibm 7.1.1.5 7.1.1.5
Rational_clearcase Ibm 7.1.1 7.1.1
Rational_clearcase Ibm 8.0 8.0
Rational_clearcase Ibm 7.1.2.14 7.1.2.14
Rational_clearcase Ibm 7.1.2.6 7.1.2.6
Rational_clearcase Ibm 7.1.2.7 7.1.2.7
Rational_clearcase Ibm 8.0.0.5 8.0.0.5
Rational_clearcase Ibm 7.1.2.3 7.1.2.3
Rational_clearcase Ibm 7.1.2.13 7.1.2.13
Rational_clearcase Ibm 7.1.0.2 7.1.0.2
Rational_clearcase Ibm 7.1.0.1 7.1.0.1
Rational_clearcase Ibm 8.0.0.7 8.0.0.7
Rational_clearcase Ibm 7.1.1.1 7.1.1.1
Rational_clearcase Ibm 8.0.0.2 8.0.0.2
Rational_clearcase Ibm 8.0.1.1 8.0.1.1
Rational_clearcase Ibm 7.1.2.9 7.1.2.9
Rational_clearcase Ibm 7.1 7.1
Rational_clearcase Ibm 8.0.0.4 8.0.0.4
Rational_clearcase Ibm 8.0.0.8 8.0.0.8
Rational_clearcase Ibm 7.1.2.1 7.1.2.1
Rational_clearcase Ibm 8.0.1 8.0.1
Rational_clearcase Ibm 8.0.0.9 8.0.0.9
Rational_clearcase Ibm 7.1.2.5 7.1.2.5
Rational_clearcase Ibm 7.1.1.4 7.1.1.4
Rational_clearcase Ibm 7.1.2.4 7.1.2.4
Rational_clearcase Ibm 8.0.0.6 8.0.0.6
Rational_clearcase Ibm 7.1.1.7 7.1.1.7
Rational_clearcase Ibm 7.1.2.2 7.1.2.2
Rational_clearcase Ibm 8.0.0.3 8.0.0.3
Rational_clearcase Ibm 7.1.1.9 7.1.1.9
Rational_clearcase Ibm 7.1.1.2 7.1.1.2
Rational_clearcase Ibm 7.1.2.11 7.1.2.11

Potential Mitigations

References