PT-2013-1844 · Ibm · Ibm Tivoli Application Dependency Discovery Manager

Publicado

2013-03-06

·

Atualizado

2017-08-29

·

CVE-2012-5770

CVSS v2.0

5.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions IBM Tivoli Application Dependency Discovery Manager (TADDM) versions 7.2.x before 7.2.1.4
Description The issue in the SSL configuration makes it easier for man-in-the-middle attackers to spoof servers and decrypt network traffic via a brute-force attack, as it supports the MD5 hash algorithm.
Recommendations For versions 7.2.x before 7.2.1.4, update to version 7.2.1.4 or later to resolve the issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2012-5770

Produtos afetados

Ibm Tivoli Application Dependency Discovery Manager