« Back to list

CVE-2012-4862

Status: ModifiedLow (2.1)—

The Host Connect emulator in IBM Rational Developer for System z 7.1 through 8.5.1 does not properly store the SSL certificate password, which allows local users to obtain sensitive information via unspecified vectors.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

IBM — Rational Developer FOR System Z

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2012-4862",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-12-05T11:57:14.977",
  "references": [
    {
      "url": "http://secunia.com/advisories/51401",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21617886",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/56725",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.securitytracker.com/id?1027818",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79919",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://secunia.com/advisories/51401",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21617886",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/56725",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1027818",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79919",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Host Connect emulator in IBM Rational Developer for System z 7.1 through 8.5.1 does not properly store the SSL certificate password, which allows local users to obtain sensitive information via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "El emulador Host Connect en IBM Rational Developer para System z v7.1 hasta v8.5.1 no almacena correctamente la contraseña del certificado SSL, permitiendo a usuarios locales obtener información sensible mediante vectores no especificados."
    }
  ],
  "lastModified": "2026-06-16T23:45:48.263",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1A610A08-6976-4BD3-BEA3-07E4BB6479EB"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:7.6.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5AE7F88A-82CB-497B-9BF0-20FC6CC53A33"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:7.6.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D0913793-B201-4A51-8F7C-09ABA999A47A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:7.6.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4214C71-0E56-46FF-829A-3938BAD9DC2B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:7.6.2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CDAF6553-5CDF-460F-ADC5-7AE2FFA4320A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:8.0.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5EE886B1-B143-4499-94BC-189AD7B503E7"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:8.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C99ED2BD-F3C8-44E0-B95D-ADB5BC628066"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:8.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3BD37E87-18CC-4ACB-BE92-8D063CEA2A35"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:8.0.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9607BF1B-8EFC-419D-84B2-537EA4B480D6"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:8.0.3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EEB98DA3-866B-4EFD-BBFF-E656BFE2D839"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:8.0.3.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5C9F5302-926D-455B-9E04-8754687D4C5E"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:8.5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B65DE782-FE3A-408E-A486-5B33280B6F2A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:8.5.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "095A59BB-9C5D-40D0-A57F-1162DBD858D2"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_developer_for_system_z:8.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E4798A47-D1B0-4172-981B-5A0F3C393923"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}