CVE-2012-0726

Severity Score

6.4

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The default configuration of TLS in IBM Tivoli Directory Server (TDS) 6.3 and earlier supports the (1) NULL-MD5 and (2) NULL-SHA ciphers, which allows remote attackers to trigger unencrypted communication via the TLS Handshake Protocol.

La configuración por defecto de TLS en Tivoli Directory Server (TDS) v6.3 y anteriores, soporta los cifrados (1) NULL-MD5 y (2) NULL-SHA, lo que permite a atacantes remotos lanzar comunicaciones no cifradas a través de TLS Handshake Protocol.

*Credits: N/A

CVSS Scores

NISTv2 6.4

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2012-01-17 CVE Reserved
2012-04-22 CVE Published
2023-03-08 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-310: Cryptographic Issues

CAPEC

References (7)

URL	Tag	Source
http://www-01.ibm.com/support/docview.wss?uid=swg21591272	X_refsource_confirm
http://www.securityfocus.com/bid/53043	Vdb Entry
http://www.securitytracker.com/id?1026939	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/74303	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://www.ibm.com/support/docview.wss?uid=swg1IO15761	2017-12-19
http://www.ibm.com/support/docview.wss?uid=swg1IO16035	2017-12-19
http://www.ibm.com/support/docview.wss?uid=swg1IO16036	2017-12-19

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Ibm Search vendor "Ibm"		Tivoli Directory Server Search vendor "Ibm" for product "Tivoli Directory Server"				<= 6.3.0 Search vendor "Ibm" for product "Tivoli Directory Server" and version " <= 6.3.0"		-		Affected
Ibm Search vendor "Ibm"		Tivoli Directory Server Search vendor "Ibm" for product "Tivoli Directory Server"				3.2.2 Search vendor "Ibm" for product "Tivoli Directory Server" and version "3.2.2"		-		Affected
Ibm Search vendor "Ibm"		Tivoli Directory Server Search vendor "Ibm" for product "Tivoli Directory Server"				4.1 Search vendor "Ibm" for product "Tivoli Directory Server" and version "4.1"		-		Affected
Ibm Search vendor "Ibm"		Tivoli Directory Server Search vendor "Ibm" for product "Tivoli Directory Server"				5.2.0 Search vendor "Ibm" for product "Tivoli Directory Server" and version "5.2.0"		-		Affected
Ibm Search vendor "Ibm"		Tivoli Directory Server Search vendor "Ibm" for product "Tivoli Directory Server"				6.0 Search vendor "Ibm" for product "Tivoli Directory Server" and version "6.0"		-		Affected
Ibm Search vendor "Ibm"		Tivoli Directory Server Search vendor "Ibm" for product "Tivoli Directory Server"				6.0.0 Search vendor "Ibm" for product "Tivoli Directory Server" and version "6.0.0"		-		Affected
Ibm Search vendor "Ibm"		Tivoli Directory Server Search vendor "Ibm" for product "Tivoli Directory Server"				6.0.0.7 Search vendor "Ibm" for product "Tivoli Directory Server" and version "6.0.0.7"		-		Affected
Ibm Search vendor "Ibm"		Tivoli Directory Server Search vendor "Ibm" for product "Tivoli Directory Server"				6.0.0.8 Search vendor "Ibm" for product "Tivoli Directory Server" and version "6.0.0.8"		-		Affected
Ibm Search vendor "Ibm"		Tivoli Directory Server Search vendor "Ibm" for product "Tivoli Directory Server"				6.0.0.69 Search vendor "Ibm" for product "Tivoli Directory Server" and version "6.0.0.69"		-		Affected
Ibm Search vendor "Ibm"		Tivoli Directory Server Search vendor "Ibm" for product "Tivoli Directory Server"				6.1.0 Search vendor "Ibm" for product "Tivoli Directory Server" and version "6.1.0"		-		Affected
Ibm Search vendor "Ibm"		Tivoli Directory Server Search vendor "Ibm" for product "Tivoli Directory Server"				6.1.0.45 Search vendor "Ibm" for product "Tivoli Directory Server" and version "6.1.0.45"		-		Affected
Ibm Search vendor "Ibm"		Tivoli Directory Server Search vendor "Ibm" for product "Tivoli Directory Server"				6.1.0.46 Search vendor "Ibm" for product "Tivoli Directory Server" and version "6.1.0.46"		-		Affected
Ibm Search vendor "Ibm"		Tivoli Directory Server Search vendor "Ibm" for product "Tivoli Directory Server"				6.1.0.47 Search vendor "Ibm" for product "Tivoli Directory Server" and version "6.1.0.47"		-		Affected
Ibm Search vendor "Ibm"		Tivoli Directory Server Search vendor "Ibm" for product "Tivoli Directory Server"				6.1.0.48 Search vendor "Ibm" for product "Tivoli Directory Server" and version "6.1.0.48"		-		Affected
Ibm Search vendor "Ibm"		Tivoli Directory Server Search vendor "Ibm" for product "Tivoli Directory Server"				6.2.0 Search vendor "Ibm" for product "Tivoli Directory Server" and version "6.2.0"		-		Affected
Ibm Search vendor "Ibm"		Tivoli Directory Server Search vendor "Ibm" for product "Tivoli Directory Server"				6.2.0.19 Search vendor "Ibm" for product "Tivoli Directory Server" and version "6.2.0.19"		-		Affected
Ibm Search vendor "Ibm"		Tivoli Directory Server Search vendor "Ibm" for product "Tivoli Directory Server"				6.2.0.20 Search vendor "Ibm" for product "Tivoli Directory Server" and version "6.2.0.20"		-		Affected
Ibm Search vendor "Ibm"		Tivoli Directory Server Search vendor "Ibm" for product "Tivoli Directory Server"				6.2.0.21 Search vendor "Ibm" for product "Tivoli Directory Server" and version "6.2.0.21"		-		Affected
Ibm Search vendor "Ibm"		Tivoli Directory Server Search vendor "Ibm" for product "Tivoli Directory Server"				6.2.0.22 Search vendor "Ibm" for product "Tivoli Directory Server" and version "6.2.0.22"		-		Affected