CVE-2024-12797

🗓️ 11 Feb 2025 15:59:36Reported by opensslType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 353 Views

Clients using raw public keys may face authentication failures, leading to potential attacks.

Reporter	Title	Published	Views	Family All 145
IBM Security Bulletins	Security Bulletin: IBM SOAR QRadar Plugin App is vulnerable to using components with known vulnerabilities	16 Apr 202514:34	–	ibm
IBM Security Bulletins	Security Bulletin: A denial-of-service attack, TE.CL request smuggling, a man-in-the-middle attack, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	16 Apr 202516:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities affecting IBM Knowledge Catalog Premium Cartridge	11 Mar 202619:05	–	ibm
IBM Security Bulletins	Security Bulletin: Storage Virtualize Ansible Collection is affected by a vulnerability in the cryptography package	9 Jun 202510:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	26 Mar 202518:00	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in cryptography-44.0.0-cp39-abi3-manylinux_2_28_x86_64.whl used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2024-12797)	25 Apr 202506:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar EDR Software contains multiple vulnerabilities	20 May 202521:07	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion HCI and IBM Fusion HCI for watsonx	31 May 202514:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in cryptography-44.0.0-cp37-abi3-macosx_10_9_universal2.whl	26 Aug 202517:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses cryptography-44.0.0-cp39-abi3-manylinux_2_28_x86_64.whl which is vulnerable to CVE-2024-12797.	30 May 202513:25	–	ibm

Vulners

Node

openssl opensslRange3.4.0–3.4.1

openssl opensslRange3.3.0–3.3.3

openssl opensslRange3.2.0–3.2.4

[
  {
    "defaultStatus": "unaffected",
    "product": "OpenSSL",
    "vendor": "OpenSSL",
    "versions": [
      {
        "lessThan": "3.4.1",
        "status": "affected",
        "version": "3.4.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.3.3",
        "status": "affected",
        "version": "3.3.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.2.4",
        "status": "affected",
        "version": "3.2.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
github	www.github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699
github	www.github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7
openssl-library	www.openssl-library.org/news/secadv/20250211.txt
github	www.github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9
openwall	www.openwall.com/lists/oss-security/2025/02/11/3
security	www.security.netapp.com/advisory/ntap-20250214-0001/
openwall	www.openwall.com/lists/oss-security/2025/02/11/4

15 Apr 2026 00:35Current

4.4Medium risk

Vulners AI Score4.4

CVSS 3.16.3

EPSS0.00826

SSVC

CWE-392