CVE-2012-2191
CVSS V2 Medium 5
CVSS V3 None
Description
IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, does not properly validate data during execution of a protection mechanism against the Vaudenay SSL CBC timing attack, which allows remote attackers to cause a denial of service (application crash) via crafted values in the TLS Record Layer, a different vulnerability than CVE-2012-2333.
Overview
- CVE ID
- CVE-2012-2191
- Assigner
- psirt@us.ibm.com
- Vulnerability Status
- Modified
- Published Version
- 2012-08-08T10:26:18
- Last Modified Date
- 2017-08-29T01:31:33
Weakness Enumerations
CPE Configuration (Product)
CPE | Vulnerable | Operator | Version Start | Version End |
---|---|---|---|---|
cpe:2.3:a:ibm:global_security_kit:*:*:*:*:*:*:*:* | 1 | OR | 8.0.13 | |
cpe:2.3:a:ibm:global_security_kit:7.0.4.28:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:ibm:global_security_kit:7.0.4.29:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:ibm:rational_directory_server:*:*:*:*:*:*:*:* | 1 | OR | ||
cpe:2.3:a:ibm:tivoli_directory_server:*:*:*:*:*:*:*:* | 1 | OR |
CVSS Version 2
- Version
- 2.0
- Vector String
- AV:N/AC:L/Au:N/C:N/I:N/A:P
- Access Vector
- NETWORK
- Access Compatibility
- LOW
- Authentication
- NONE
- Confidentiality Impact
- NONE
- Integrity Impact
- NONE
- Availability Impact
- PARTIAL
- Base Score
- 5
- Severity
- MEDIUM
- Exploitability Score
- 10
- Impact Score
- 2.9
References
Sources
Source Name | Source URL |
---|---|
NIST | https://nvd.nist.gov/vuln/detail/CVE-2012-2191 |
MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2191 |
History
Created | Old Value | New Value | Data Type | Notes |
---|---|---|---|---|
2022-05-10 08:49:56 | Added to TrackCVE |