PT-2012-4706 · Teiid · Teiid Java Database Connectivity (Jdbc) Socket

David Jorm + 1 · Publicado 2012-11-23 · Atualizado 2017-08-29 · CVE-2012-3431

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Teiid Java Database Connectivity (JDBC) socket versions prior to 5.3.0

Description The issue allows remote attackers to obtain login credentials via a man-in-the-middle (MITM) attack because login messages are not encrypted by default, contrary to documentation and specification.

Recommendations For versions prior to 5.3.0, update to version 5.3.0 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2012-3431

Produtos afetados

Teiid Java Database Connectivity (Jdbc) Socket

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/78803 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-3431 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=843669 · Nota
• http://rhn.redhat.com/errata/RHSA-2012-1301.html · Aviso do Fabricante
• http://securityfocus.com/bid/55634 · Nota