CVE-2012-0717

Published: Jun 20, 2012Modified: Apr 29, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

IBM WebSphere Application Server 7.0 before 7.0.0.23, when a certain SSLv2 configuration with client authentication is used, allows remote attackers to bypass X.509 client-certificate authentication via unspecified vectors.

Affected (16)

Products: Ibm: Websphere Application Server

Ibm

1 product

Websphere Application Server

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Application Server	Version 7.0.0.11
Ibm Websphere Application Server	Version 7.0.0.13
Ibm Websphere Application Server	Version 7.0.0.15
Ibm Websphere Application Server	Version 7.0.0.17
Ibm Websphere Application Server	Version 7.0.0.19
Ibm Websphere Application Server	Version 7.0.0.1
Ibm Websphere Application Server	Version 7.0.0.21
Ibm Websphere Application Server	Version 7.0.0.2
Ibm Websphere Application Server	Version 7.0.0.3
Ibm Websphere Application Server	Version 7.0.0.4
Ibm Websphere Application Server	Version 7.0.0.5
Ibm Websphere Application Server	Version 7.0.0.6
Ibm Websphere Application Server	Version 7.0.0.7
Ibm Websphere Application Server	Version 7.0.0.8
Ibm Websphere Application Server	Version 7.0.0.9
Ibm Websphere Application Server	Version 7.0

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (4)

http://www.ibm.com/support/docview.wss?uid=swg1PM52351

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=swg21595172

Source: psirt@us.ibm.com

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=swg1PM52351

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ibm.com/support/docview.wss?uid=swg21595172

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.