Vulnerabilities > IBM > Rational Directory Server > 5.2.1

DATE CVE VULNERABILITY TITLE RISK
2014-08-22 CVE-2014-3089 Cryptographic Issues vulnerability in IBM products
The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0 before iFix002, includes the cleartext root password, which allows local users to obtain sensitive information by reading a library file.
local
low complexity
ibm CWE-310
4.9
2013-05-28 CVE-2013-0599 Information Exposure vulnerability in IBM Rational Directory Server
IBM Eclipse Help System (IEHS), as used in IBM Rational Directory Server 5.1.1 through 5.1.1.2 and 5.2 through 5.2.1 and other products, allows remote attackers to obtain sensitive information by providing a crafted parameter path and then reading the debug information associated with the 500 HTTP status code.
network
low complexity
ibm CWE-200
5.0