PT-2012-5615 · Ibm · Ibm Rational Developer For System Z

Published 2012-12-05 · Updated 2017-08-29 · CVE-2012-4862

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Rational Developer for System z versions 7.1 through 8.5.1

Description The issue concerns the Host Connect emulator, which does not properly store the SSL certificate password. This allows local users to obtain sensitive information.

Recommendations For versions 7.1 through 8.5.1, update to a version that properly secures the SSL certificate password to prevent unauthorized access to sensitive information.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2012-4862

Affected Products

Ibm Rational Developer For System Z

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2012-4862 · Security Note
• http://secunia.com/advisories/51401 · Note
• http://securityfocus.com/bid/56725 · Note
• http://ibm.com/support/docview.wss?uid=swg21617886 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79919 · Note
• http://securitytracker.com/id?1027818 · Note