CVE-2012-3431

EPSS 0.34%
Published 23.11.2012 20:55:02
Last modified 11.04.2025 00:51:21
Source secalert@redhat.com
Teams watchlist Login
Open Login

The Teiid Java Database Connectivity (JDBC) socket, as used in JBoss Enterprise Data Services Platform before 5.3.0, does not encrypt login messages by default contrary to documentation and specification, which allows remote attackers to obtain login credentials via a man-in-the-middle (MITM) attack.

Affected products Warnungen 0 Metrics 2 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Redhat ≫ Jboss Enterprise Data Services Platform Version <= 5.2.0

Redhat ≫ Jboss Enterprise Data Services Platform Version5.1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.34%	0.539

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

http://rhn.redhat.com/errata/RHSA-2012-1301.html

Vendor Advisory

http://www.securityfocus.com/bid/55634

https://bugzilla.redhat.com/show_bug.cgi?id=843669

https://exchange.xforce.ibmcloud.com/vulnerabilities/78803

https://nvd.nist.gov/vuln/detail/CVE-2012-3431

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-3431

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-3431

EUVD