Unscored severity · published Dec 28, 2012
CVE-2012-0741
IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during use of the Manual Explore Proxy feature, which…
–
CVSS
0.6%
EPSS
No
On KEV
Description
IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during use of the Manual Explore Proxy feature, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary certificate.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 48% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RP
Rational Policy Tester · Ibm
through 8.5.0.2; 5.5.0.0; 5.5.0.1; 5.5.0.2; 5.6.0.0; 5.6.0.1; +9 more · source: NVD
SA
Security Appscan · Ibm
6.0.0.0; 6.0.1.0; 6.0.2.0; 6.1.1.0; 8.0.0.0; 8.0.0.1; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0741
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0741
Patch
http://www-01.ibm.com/support/docview.wss?uid=swg21620759
Patch
http://www-01.ibm.com/support/docview.wss?uid=swg21620760
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/74142
More from Rational Policy Tester
–
CVE-2013-4062
IBM Rational Policy Tester 8.5 before 8.5.0.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof Jazz Team servers, obtain…
–
CVE-2013-4061
IBM Rational Policy Tester 8.5 before 8.5.0.5 does not properly check authorization for changes to the set of authentication hosts, which allows remote authenticated users to…
–
CVE-2013-0532
Cross-site request forgery (CSRF) vulnerability in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote…
–
CVE-2013-0513
IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 create a service that lacks " (double quote) characters in the…
–
CVE-2013-0512
Stack-based buffer overflow in the Manual Explore browser plug-in for Firefox in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x…