PT-2012-5615 · Ibm · Ibm Rational Developer For System Z

Publicado 2012-12-05 · Atualizado 2017-08-29 · CVE-2012-4862

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Rational Developer for System z versions 7.1 through 8.5.1

Description The issue concerns the Host Connect emulator, which does not properly store the SSL certificate password. This allows local users to obtain sensitive information.

Recommendations For versions 7.1 through 8.5.1, update to a version that properly secures the SSL certificate password to prevent unauthorized access to sensitive information.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2012-4862

Produtos afetados

Ibm Rational Developer For System Z

Referências · 6

• http://secunia.com/advisories/51401 · Nota
• http://securityfocus.com/bid/56725 · Nota
• http://ibm.com/support/docview.wss?uid=swg21617886 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79919 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-4862 · Nota de Segurança
• http://securitytracker.com/id?1027818 · Nota