CVE-2012-0732

Published: May 3, 2012Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

The Enterprise Console client in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected (15)

Products: Ibm: Rational Appscan

Ibm

1 product

Rational Appscan

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Appscan	Version 5.2
Ibm Rational Appscan	Version 5.4
Ibm Rational Appscan	Version 5.5.0.1
Ibm Rational Appscan	Version 5.5.0.2
Ibm Rational Appscan	Version 5.5.0
Ibm Rational Appscan	Version 5.6.0.3
Ibm Rational Appscan	Version 5.6.0
Ibm Rational Appscan	Version 8.0.0.1
Ibm Rational Appscan	Version 8.0.0.2
Ibm Rational Appscan	Version 8.0.0.3
Ibm Rational Appscan	Version 8.0.0
Ibm Rational Appscan	Version 8.0.1.1
Ibm Rational Appscan	Version 8.0.1
Ibm Rational Appscan	Version 8.5.0.0
Ibm Rational Appscan	Version 8.5.0