CVE-2012-3431

EPSS 0.34%
Veröffentlicht 23.11.2012 20:55:02
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle secalert@redhat.com
Teams Watchlist Login
Unerledigt Login

The Teiid Java Database Connectivity (JDBC) socket, as used in JBoss Enterprise Data Services Platform before 5.3.0, does not encrypt login messages by default contrary to documentation and specification, which allows remote attackers to obtain login credentials via a man-in-the-middle (MITM) attack.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Redhat ≫ Jboss Enterprise Data Services Platform Version <= 5.2.0

Redhat ≫ Jboss Enterprise Data Services Platform Version5.1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.34%	0.539

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

http://rhn.redhat.com/errata/RHSA-2012-1301.html

Vendor Advisory

http://www.securityfocus.com/bid/55634

https://bugzilla.redhat.com/show_bug.cgi?id=843669

https://exchange.xforce.ibmcloud.com/vulnerabilities/78803

https://nvd.nist.gov/vuln/detail/CVE-2012-3431

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-3431

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-3431

EUVD