Lucene search
IbmCVE-2012-4862HistoryDec 05, 2012 - 11:57 a.m.
CVE-2012-4862
2012-12-0511:57:14
CWE-255
ibm
web.nvd.nist.gov
19
ibm
rational developer
system z
ssl certificate
vulnerability
security
nvd
cve-2012-4862
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
5.7
Confidence
Low
EPSS
0
Percentile
5.1%
The Host Connect emulator in IBM Rational Developer for System z 7.1 through 8.5.1 does not properly store the SSL certificate password, which allows local users to obtain sensitive information via unspecified vectors.
Affected configurations
Node
ibmrational_developer_for_system_zMatch7.1
ORibmrational_developer_for_system_zMatch7.6.2.1
ORibmrational_developer_for_system_zMatch7.6.2.2
ORibmrational_developer_for_system_zMatch7.6.2.3
ORibmrational_developer_for_system_zMatch7.6.2.4
ORibmrational_developer_for_system_zMatch8.0.1.0
ORibmrational_developer_for_system_zMatch8.0.2
ORibmrational_developer_for_system_zMatch8.0.3
ORibmrational_developer_for_system_zMatch8.0.3.1
ORibmrational_developer_for_system_zMatch8.0.3.2
ORibmrational_developer_for_system_zMatch8.0.3.3
ORibmrational_developer_for_system_zMatch8.5.0
ORibmrational_developer_for_system_zMatch8.5.0.1
ORibmrational_developer_for_system_zMatch8.5.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | rational_developer_for_system_z | 7.1 | cpe:2.3:a:ibm:rational_developer_for_system_z:7.1:*:*:*:*:*:*:* |
| ibm | rational_developer_for_system_z | 7.6.2.1 | cpe:2.3:a:ibm:rational_developer_for_system_z:7.6.2.1:*:*:*:*:*:*:* |
| ibm | rational_developer_for_system_z | 7.6.2.2 | cpe:2.3:a:ibm:rational_developer_for_system_z:7.6.2.2:*:*:*:*:*:*:* |
| ibm | rational_developer_for_system_z | 7.6.2.3 | cpe:2.3:a:ibm:rational_developer_for_system_z:7.6.2.3:*:*:*:*:*:*:* |
| ibm | rational_developer_for_system_z | 7.6.2.4 | cpe:2.3:a:ibm:rational_developer_for_system_z:7.6.2.4:*:*:*:*:*:*:* |
| ibm | rational_developer_for_system_z | 8.0.1.0 | cpe:2.3:a:ibm:rational_developer_for_system_z:8.0.1.0:*:*:*:*:*:*:* |
| ibm | rational_developer_for_system_z | 8.0.2 | cpe:2.3:a:ibm:rational_developer_for_system_z:8.0.2:*:*:*:*:*:*:* |
| ibm | rational_developer_for_system_z | 8.0.3 | cpe:2.3:a:ibm:rational_developer_for_system_z:8.0.3:*:*:*:*:*:*:* |
| ibm | rational_developer_for_system_z | 8.0.3.1 | cpe:2.3:a:ibm:rational_developer_for_system_z:8.0.3.1:*:*:*:*:*:*:* |
| ibm | rational_developer_for_system_z | 8.0.3.2 | cpe:2.3:a:ibm:rational_developer_for_system_z:8.0.3.2:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2012-12-05 11:57:00
cvelist
cvelist
CVE-2012-4862
2012-12-05 11:00:00
nvd
nvd
CVE-2012-4862
2012-12-05 11:57:14
openvas
openvas
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
5.7
Confidence
Low
EPSS
0
Percentile
5.1%
Related for CVE-2012-4862