6.4

CVE-2012-0726

The default configuration of TLS in IBM Tivoli Directory Server (TDS) 6.3 and earlier supports the (1) NULL-MD5 and (2) NULL-SHA ciphers, which allows remote attackers to trigger unencrypted communication via the TLS Handshake Protocol.

Data is provided by the National Vulnerability Database (NVD)
IbmTivoli Directory Server Version <= 6.3.0
IbmTivoli Directory Server Version3.2.2
IbmTivoli Directory Server Version4.1
IbmTivoli Directory Server Version5.2.0
IbmTivoli Directory Server Version6.0
IbmTivoli Directory Server Version6.0.0
IbmTivoli Directory Server Version6.0.0.7
IbmTivoli Directory Server Version6.0.0.8
IbmTivoli Directory Server Version6.0.0.69
IbmTivoli Directory Server Version6.1.0
IbmTivoli Directory Server Version6.1.0.45
IbmTivoli Directory Server Version6.1.0.46
IbmTivoli Directory Server Version6.1.0.47
IbmTivoli Directory Server Version6.1.0.48
IbmTivoli Directory Server Version6.2.0
IbmTivoli Directory Server Version6.2.0.19
IbmTivoli Directory Server Version6.2.0.20
IbmTivoli Directory Server Version6.2.0.21
IbmTivoli Directory Server Version6.2.0.22
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.52% 0.641
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:P/A:N