Vulnerability Details CVE-2012-5770
The SSL configuration in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 supports the MD5 hash algorithm, which makes it easier for man-in-the-middle attackers to spoof servers and decrypt network traffic via a brute-force attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.2%
CVSS Severity
CVSS v2 Score 5.8
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV32391
- http://www-01.ibm.com/support/docview.wss?uid=swg21626029
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80354
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV32391
- http://www-01.ibm.com/support/docview.wss?uid=swg21626029
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80354
Products affected by CVE-2012-5770
-
cpe:2.3:a:ibm:tivoli_application_dependency_discovery_manager:7.2.0.0
-
cpe:2.3:a:ibm:tivoli_application_dependency_discovery_manager:7.2.1
-
cpe:2.3:a:ibm:tivoli_application_dependency_discovery_manager:7.2.1.3