Lucene search
+L

3 matches found

CVE
CVE
•added 2012/11/23 11:00 a.m.•76 views

CVE-2012-5756

The CVE-2012-5756 entry concerns IBM WebSphere DataPower XC10 Appliance (versions 2.0.0.0–2.0.0.3 and 2.1.0.0–2.1.0.2). The root cause is a shared secret key used across different customers’ collective configurations, enabling a remote attacker to spoof a container server by either sniffing a cle...

4.3CVSS6.7AI score0.01348EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/11/23 12:00 a.m.•9 views

CVE-2012-5756: Undefined Security Weakness

The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2, when a collective configuration is enabled, has a single secret key that is shared across different customers' installations, which allows remote attackers to spoof a container server by 1 sniffing the...

4.3CVSS5.9AI score0.01348EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2012/11/23 12:00 a.m.•11 views

PT-2012-6087

Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower XC10 Appliance versions 2.0.0.0 through 2.0.0.3 IBM WebSphere DataPower XC10 Appliance versions 2.1.0.0 through 2.1.0.2 Description The issue allows remote attackers to spoof a container server by either sniffing the...

4.3CVSS0.01348EPSS
SaveExploits0References8
Rows per page
Query Builder