AZL-78591 CVE-2024-12797 affecting package openssl-fips-provider 3.1.2-1

🗓️ 11 Feb 2025 16:15:38Reported by GoogleType

osv🔗 osv.dev👁 2 Views

TLS/DTLS with raw public keys may not detect server auth failure when SSL_VERIFY_PEER is set, risking man middle attack.

Reporter	Title	Published	Views	Family All 145
IBM Security Bulletins	Security Bulletin: IBM SOAR QRadar Plugin App is vulnerable to using components with known vulnerabilities	16 Apr 202514:34	–	ibm
IBM Security Bulletins	Security Bulletin: A denial-of-service attack, TE.CL request smuggling, a man-in-the-middle attack, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	16 Apr 202516:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities affecting IBM Knowledge Catalog Premium Cartridge	11 Mar 202619:05	–	ibm
IBM Security Bulletins	Security Bulletin: Storage Virtualize Ansible Collection is affected by a vulnerability in the cryptography package	9 Jun 202510:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	26 Mar 202518:00	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in cryptography-44.0.0-cp39-abi3-manylinux_2_28_x86_64.whl used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2024-12797)	25 Apr 202506:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar EDR Software contains multiple vulnerabilities	20 May 202521:07	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion HCI and IBM Fusion HCI for watsonx	31 May 202514:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in cryptography-44.0.0-cp37-abi3-macosx_10_9_universal2.whl	26 Aug 202517:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses cryptography-44.0.0-cp39-abi3-manylinux_2_28_x86_64.whl which is vulnerable to CVE-2024-12797.	30 May 202513:25	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-12797

21 Apr 2026 04:34Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16.3

EPSS0.00826

SSVC