Unscored severity · published Aug 8, 2012
CVE-2012-2203
IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, uses the PKCS #12 file format for…
–
CVSS
1.6%
EPSS
No
On KEV
Description
IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, uses the PKCS #12 file format for certificate objects without enforcing file integrity, which makes it easier for remote attackers to spoof SSL servers via vectors involving insertion of an arbitrary root Certification Authority (CA) certificate.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GS
Global Security Kit · Ibm
through 8.0.13; 7.0.4.28; 7.0.4.29 · source: NVD
RD
Rational Directory Server · Ibm
All versions, or not specified · source: NVD
TD
Tivoli Directory Server · Ibm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2203
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2203
secunia.com
http://secunia.com/advisories/51279
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV31973
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV31975
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21606145
www.securityfocus.com
http://www.securityfocus.com/bid/54743
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/77280
More from Global Security Kit
–
CVE-2013-6747
IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a…
–
CVE-2013-6329
IBM Global Security Kit (aka GSKit), as used in Content Manager OnDemand 8.5 and 9.0 and other products, allows remote attackers to cause a denial of service via a crafted…
–
CVE-2012-2191
IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, does not properly validate data…