CVE-2012-0741

Опубликовано: 28 дек. 2012

Источник: nvd

CVSS2: 5.8

EPSS Низкий

Описание

IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during use of the Manual Explore Proxy feature, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary certificate.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21620759
Patch
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21620760
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/74142
http://www-01.ibm.com/support/docview.wss?uid=swg21620759
Patch
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21620760
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/74142

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_appscan:6.0.0.0:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:6.0.1.0:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:6.0.2.0:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:6.1.1.0:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:8.0.0.0:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:8.0.0.1:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:8.5.0.0:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:8.5.0.1:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:8.6.0.0:-:enterprise:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:ibm:rational_policy_tester:*:*:*:*:*:*:*:*

Версия до 8.5.0.2 (включая)

cpe:2.3:a:ibm:rational_policy_tester:5.5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_policy_tester:5.5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_policy_tester:5.5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_policy_tester:5.6.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_policy_tester:5.6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_policy_tester:5.6.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_policy_tester:5.6.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_policy_tester:8.0.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_policy_tester:8.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_policy_tester:8.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_policy_tester:8.0.1.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_policy_tester:8.0.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_policy_tester:8.5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_policy_tester:8.5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:*:-:enterprise:*:*:*:*:*

Версия до 8.6.0.1 (включая)

EPSS

Процентиль: 34%

0.00139

Низкий

5.8 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-63m8-v7w4-mcq7

github

больше 3 лет назад