NVD

Id
42814  
Name
CVE-2012-0732  
Description
The Enterprise Console client in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-05-03  
Modified Date
2014-03-05  
Seq
2012-0732  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
215489 42814 CVE-2012-0732 http://www.ibm.com/support/docview.wss?uid=swg21592188  View
215490 42814 CVE-2012-0732 53247  View
215491 42814 CVE-2012-0732 ae-ecc-spoofing(74389)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26488 JVNDB-2012-002195 IBM Rational AppScan におけるサーバになりすまされる脆弱性 IBM Rational AppScan は、SSL サーバから送られる X.509 証明書を適切に検証しないため、サーバになりすまされる、および重要な情報を取得される脆弱性が存在します。 CVE-2012-0732 53970 CVE-2012-0732 42814 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002195.html 2012-05-03 2012-05-08 View