Lucene search
HistoryApr 16, 2013 - 2:04 p.m.
CVE-2012-4829
ibm
xiv
storage
system
gen3
authentication
vulnerability
x.509
certificate
trust
nvd
6.4 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
26.2%
IBM XIV Storage System Gen3 before 11.2 relies on a default X.509 v3 certificate for authentication, which allows man-in-the-middle attackers to spoof servers by leveraging an inappropriate certificate-trust relationship.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm:xiv_storage_system_gen3 | ibm xiv storage system gen3 | le | 11.1 |
6.4 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
26.2%
Related for CVE-2012-4829