PT-2013-4824 · Ibm · Ibm Rational Policy Tester

Publicado

2013-09-09

·

Atualizado

2017-08-29

·

CVE-2013-4062

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions IBM Rational Policy Tester version 8.5 before 8.5.0.5
Description The issue allows man-in-the-middle attackers to spoof servers, obtain sensitive information, and modify the client-server data stream via a crafted X.509 certificate, as the software does not verify X.509 certificates from SSL servers.
Recommendations For IBM Rational Policy Tester version 8.5 before 8.5.0.5, update to version 8.5.0.5 or later to resolve the issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2013-4062

Produtos afetados

Ibm Rational Policy Tester