« Volver al listado

CVE-2012-0738

Estado: ModificadaMedia (5.8)—

IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during scanning, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary certificate.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

IBM — Rational Policy TesterIBM — Security Appscan

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-0738",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-12-28T11:48:44.173",
  "references": [
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21620759",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21620760",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74578",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21620759",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21620760",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/74578",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during scanning, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary certificate."
    },
    {
      "lang": "es",
      "value": "IBM Security AppScan Enterprise antes de v8.6.0.2 y Rational Policy Tester Tellows antes de v8.5.0.3 no validan los certificados X.509 durante la exploración, lo que permite a atacantes man-in-the-middle falsificar servidores de su elección a través de un certificado SSL de su elección.\r\n"
    }
  ],
  "lastModified": "2026-06-16T23:38:10.063",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:security_appscan:6.0.0.0:-:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5D0878E6-3440-4964-B48C-FBBD12114E7C"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_appscan:6.0.1.0:-:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "22B9EADC-4DEE-457C-895E-01B6AE21EFF2"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_appscan:6.0.2.0:-:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5AC6947-C345-417C-BD16-69B2D676B0B1"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_appscan:6.1.1.0:-:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "145F339B-862C-44AC-9888-3540EE71863D"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_appscan:8.0.0.0:-:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A1B610D1-259B-4302-B53C-122B28DC9C3E"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_appscan:8.0.0.1:-:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "118823C5-6169-41E3-BD9D-707A11ABF6D0"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_appscan:8.5.0.0:-:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F8F320A3-9317-4FDA-B1FB-64B70393802D"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_appscan:8.5.0.1:-:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "757704EA-B054-4D1C-808F-4EFF34CDB4D9"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_appscan:8.6.0.0:-:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4EE41CC5-24F1-44D3-A881-628B049C242C"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:rational_policy_tester:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6438D9BA-3578-40D2-8C87-46032893B0A9",
              "versionEndIncluding": "8.5.0.2"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_policy_tester:5.5.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CCC34E0F-1811-4C51-BAA1-FF687FF7DC55"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_policy_tester:5.5.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A2F320BB-790C-4777-86C2-FAAEC06E3251"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_policy_tester:5.5.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "26E9097C-11F3-405D-96E9-3AA1C073281A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_policy_tester:5.6.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB783DFB-39C9-45CA-BBCB-8EE880F13579"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_policy_tester:5.6.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9B8D79A6-8878-4028-98D8-D64F162D75E7"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_policy_tester:5.6.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A6D76132-4063-4E36-A4D1-BB05502F24F4"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_policy_tester:5.6.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE24E3E6-DAFC-4F19-897A-758E67592BD2"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_policy_tester:8.0.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "97EE9572-3250-4AA1-A6EC-CDFE0B47B43A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_policy_tester:8.0.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9DC267C4-83C0-41A0-80DE-E31ADDD842D6"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_policy_tester:8.0.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "838DA33E-980E-4F30-B41F-5088AC8B5E82"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_policy_tester:8.0.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7838763D-3370-44FB-B034-0EFE0120648F"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_policy_tester:8.0.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "17354A71-D675-42D2-BEA6-E186E338B118"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_policy_tester:8.5.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6009EF79-F032-4AF3-B88A-CCF756243BD9"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_policy_tester:8.5.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "94B9869E-B797-4883-87B4-F66BA3940094"
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_appscan:*:-:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D15517C8-E971-4E7C-B596-D8FF811EC0CD",
              "versionEndIncluding": "8.6.0.1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}