5.8

CVE-2012-0741

IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during use of the Manual Explore Proxy feature, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary certificate.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Security Appscan Version 6.0.0.0 Update - Edition enterprise
Ibm ≫ Security Appscan Version 6.0.1.0 Update - Edition enterprise
Ibm ≫ Security Appscan Version 6.0.2.0 Update - Edition enterprise
Ibm ≫ Security Appscan Version 6.1.1.0 Update - Edition enterprise
Ibm ≫ Security Appscan Version 8.0.0.0 Update - Edition enterprise
Ibm ≫ Security Appscan Version 8.0.0.1 Update - Edition enterprise
Ibm ≫ Security Appscan Version 8.5.0.0 Update - Edition enterprise
Ibm ≫ Security Appscan Version 8.5.0.1 Update - Edition enterprise
Ibm ≫ Security Appscan Version 8.6.0.0 Update - Edition enterprise
Ibm ≫ Rational Policy Tester Version <= 8.5.0.2
Ibm ≫ Rational Policy Tester Version 5.5.0.0
Ibm ≫ Rational Policy Tester Version 5.5.0.1
Ibm ≫ Rational Policy Tester Version 5.5.0.2
Ibm ≫ Rational Policy Tester Version 5.6.0.0
Ibm ≫ Rational Policy Tester Version 5.6.0.1
Ibm ≫ Rational Policy Tester Version 5.6.0.2
Ibm ≫ Rational Policy Tester Version 5.6.0.3
Ibm ≫ Rational Policy Tester Version 8.0.0.0
Ibm ≫ Rational Policy Tester Version 8.0.0.1
Ibm ≫ Rational Policy Tester Version 8.0.0.2
Ibm ≫ Rational Policy Tester Version 8.0.1.0
Ibm ≫ Rational Policy Tester Version 8.0.1.1
Ibm ≫ Rational Policy Tester Version 8.5.0.0
Ibm ≫ Rational Policy Tester Version 8.5.0.1
Ibm ≫ Security Appscan Update - Edition enterprise Version <= 8.6.0.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.59% 0.436
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www-01.ibm.com/support/docview.wss?uid=swg21620759
Patch
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21620760
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/74142