4 matches found
CVE-2012-2191
Technical details for CVE-2012-2191 are not publicly provided in the Connected documents. The available sources summarize the issue (GSKit TLS CBC timing attack) but do not include affected versions, roots, or fixes in this corpus. Monitor for updates.
CVE-2012-2203
CVE-2012-2203 concerns IBM GSKit (PKCS#12) where trust anchors can be inserted into the keystore, enabling possible SSL/TLS spoofing. IBM advisories show GSKit updates as remediation across multiple products: for Tivoli/GSKit 7.x use 7.0.4.41 or later; for GSKit 8.x use 8.0.14.22 or later (e.g., ...
CVE-2013-0599
The CVE-2013-0599 issue centers on the IBM Eclipse Help System (IEHS) used across IBM products (e.g., Data Studio, OmniFind/Content Analytics, WebSphere-related offerings). A remote attacker can obtain sensitive information by requesting a crafted parameter path or URL, which can trigger error me...
CVE-2014-3089
CVE-2014-3089 affects IBM Rational Directory Server (RDS) Java Client libraries and related components. The vulnerability arises because the RDS Java Client library carries the cleartext password for the root user, allowing an attacker with local access to obtain sensitive data by reading the lib...