NVD

Id
42808  
Name
CVE-2012-0726  
Description
The default configuration of TLS in IBM Tivoli Directory Server (TDS) 6.3 and earlier supports the (1) NULL-MD5 and (2) NULL-SHA ciphers, which allows remote attackers to trigger unencrypted communication via the TLS Handshake Protocol.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-04-22  
Modified Date
2012-12-18  
Seq
2012-0726  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
215468 42808 CVE-2012-0726 http://www-01.ibm.com/support/docview.wss?uid=swg21591272  View
215469 42808 CVE-2012-0726 IO15761  View
215470 42808 CVE-2012-0726 IO16035  View
215471 42808 CVE-2012-0726 IO16036  View
215472 42808 CVE-2012-0726 1026939  View
215473 42808 CVE-2012-0726 tds-nullcipher-weak-security(74303)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26412 JVNDB-2012-002119 IBM Tivoli Directory Server の TLS のデフォルト設定における非暗号化通信を誘発される脆弱性 IBM Tivoli Directory Server (TDS) の TLS のデフォルト設定は、(1) NULL-MD5、および (2) NULL-SHA 暗号をサポートするため、非暗号化通信を誘発される脆弱性が存在します。 CVE-2012-0726 53964 CVE-2012-0726 42808 6.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002119.html 2012-04-16 2012-04-24 View