5.8
CVE-2012-5662
- EPSS 0.62%
- Veröffentlicht 27.05.2014 14:55:02
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Erkennungen
Loginx3270 before 3.3.12ga12 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Paul Mattes ≫ X3270 Update ga11 Version <= 3.3.12
Paul Mattes ≫ X3270 Version 3.3.5
Paul Mattes ≫ X3270 Version 3.3.6
Paul Mattes ≫ X3270 Version 3.3.7
Paul Mattes ≫ X3270 Version 3.3.8 Update -
Paul Mattes ≫ X3270 Version 3.3.8 Update p1
Paul Mattes ≫ X3270 Version 3.3.8 Update p2
Paul Mattes ≫ X3270 Version 3.3.8 Update p3
Paul Mattes ≫ X3270 Version 3.3.9 Update ga11
Paul Mattes ≫ X3270 Version 3.3.9 Update ga12
Paul Mattes ≫ X3270 Version 3.3.10 Update ga3
Paul Mattes ≫ X3270 Version 3.3.10 Update ga4
Paul Mattes ≫ X3270 Version 3.3.10 Update ga5
Paul Mattes ≫ X3270 Version 3.3.11 Update beta2
Paul Mattes ≫ X3270 Version 3.3.11 Update beta4
Paul Mattes ≫ X3270 Version 3.3.11 Update ga6
Paul Mattes ≫ X3270 Version 3.3.12 Update beta6
Paul Mattes ≫ X3270 Version 3.3.12 Update ga10
Paul Mattes ≫ X3270 Version 3.3.12 Update ga7
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.62% | 0.45 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5.8 | 8.6 | 4.9 |
AV:N/AC:M/Au:N/C:P/I:P/A:N
|
http://osvdb.org/91572
http://secunia.com/advisories/52650
http://sourceforge.net/projects/x3270/files/x3270/3.3.12ga12/
https://bugzilla.redhat.com/show_bug.cgi?id=889373
https://exchange.xforce.ibmcloud.com/vulnerabilities/82984