« Volver al listado

CVE-2012-4862

Estado: ModificadaBaja (2.1)—

The Host Connect emulator in IBM Rational Developer for System z 7.1 through 8.5.1 does not properly store the SSL certificate password, which allows local users to obtain sensitive information via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Rational Developer FOR System Z

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-4862",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-12-05T11:57:14.977",
  "references": [
    {
      "url": "http://secunia.com/advisories/51401",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21617886",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/56725",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.securitytracker.com/id?1027818",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79919",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://secunia.com/advisories/51401",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21617886",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/56725",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1027818",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79919",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Host Connect emulator in IBM Rational Developer for System z 7.1 through 8.5.1 does not properly store the SSL certificate password, which allows local users to obtain sensitive information via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "El emulador Host Connect en IBM Rational Developer para System z v7.1 hasta v8.5.1 no almacena correctamente la contraseña del certificado SSL, permitiendo a usuarios locales obtener información sensible mediante vectores no especificados."
    }
  ],
  "lastModified": "2026-06-16T23:45:48.263",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1A610A08-6976-4BD3-BEA3-07E4BB6479EB"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:7.6.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5AE7F88A-82CB-497B-9BF0-20FC6CC53A33"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:7.6.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D0913793-B201-4A51-8F7C-09ABA999A47A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:7.6.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4214C71-0E56-46FF-829A-3938BAD9DC2B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:7.6.2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CDAF6553-5CDF-460F-ADC5-7AE2FFA4320A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:8.0.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5EE886B1-B143-4499-94BC-189AD7B503E7"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:8.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C99ED2BD-F3C8-44E0-B95D-ADB5BC628066"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:8.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3BD37E87-18CC-4ACB-BE92-8D063CEA2A35"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:8.0.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9607BF1B-8EFC-419D-84B2-537EA4B480D6"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:8.0.3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EEB98DA3-866B-4EFD-BBFF-E656BFE2D839"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:8.0.3.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5C9F5302-926D-455B-9E04-8754687D4C5E"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:8.5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B65DE782-FE3A-408E-A486-5B33280B6F2A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:8.5.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "095A59BB-9C5D-40D0-A57F-1162DBD858D2"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:8.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E4798A47-D1B0-4172-981B-5A0F3C393923"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}