The installation component in IBM Rational Asset Analyzer (RAA) 6.1.0 before FP10 allows local users to discover the WAS Admin password by reading IM native logs.
The product writes sensitive information to a log file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Rational_asset_analyzer | Ibm | 6.1.0 (including) | 6.1.0 (including) |
| Rational_asset_analyzer | Ibm | 6.1.0.1 (including) | 6.1.0.1 (including) |
| Rational_asset_analyzer | Ibm | 6.1.0.2 (including) | 6.1.0.2 (including) |
| Rational_asset_analyzer | Ibm | 6.1.0.3 (including) | 6.1.0.3 (including) |
| Rational_asset_analyzer | Ibm | 6.1.0.4 (including) | 6.1.0.4 (including) |
| Rational_asset_analyzer | Ibm | 6.1.0.5 (including) | 6.1.0.5 (including) |
| Rational_asset_analyzer | Ibm | 6.1.0.6 (including) | 6.1.0.6 (including) |
| Rational_asset_analyzer | Ibm | 6.1.0.7 (including) | 6.1.0.7 (including) |
| Rational_asset_analyzer | Ibm | 6.1.0.8 (including) | 6.1.0.8 (including) |
| Rational_asset_analyzer | Ibm | 6.1.0.9 (including) | 6.1.0.9 (including) |