Skip to main content

Tivoli Application Dependency Discovery Manager CVE-2012-5770

MEDIUM
Configuration (CWE-16)
2013-03-06 psirt@us.ibm.com
Information Disclosure IBM Tivoli Application Dependency Discovery Manager
5.8
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
5.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:P/I:P/A:N
Attack Vector
Network
Attack Complexity
M
Confidentiality
P
Integrity
P
Availability
None

Lifecycle Timeline

1
CVE Published
Mar 06, 2013 - 13:10 cve.org
MEDIUM 5.8

DescriptionCVE.org

The SSL configuration in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 supports the MD5 hash algorithm, which makes it easier for man-in-the-middle attackers to spoof servers and decrypt network traffic via a brute-force attack.

AnalysisAI

The SSL configuration in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 supports the MD5 hash algorithm, which makes it easier for man-in-the-middle attackers to. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable.

Technical ContextAI

This vulnerability is classified under CWE-16. The SSL configuration in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 supports the MD5 hash algorithm, which makes it easier for man-in-the-middle attackers to spoof servers and decrypt network traffic via a brute-force attack. Affected products include: Ibm Tivoli Application Dependency Discovery Manager. Version information: before 7.2.1.4.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Tivoli Application Dependency Discovery Manager

View all
CVE-2018-1455 HIGH
8.8 Aug 15

IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site request forgery which coul
CVE-2013-4002 HIGH
7.1 Jul 23

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5
CVE-2013-2974 HIGH
7.5 Jan 29

The BIRT viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.1.x before 7.2.1.5 allows remote auth
CVE-2016-8925 MEDIUM
6.5 Apr 14

IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could allow a remote attacker to include arbitrary fil
CVE-2016-8927 MEDIUM
5.4 Apr 14

IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site scripting. Rated medium se
CVE-2014-6149 MEDIUM
5.0 Oct 29

Directory traversal vulnerability in BIRT-viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.0.0

CVE-2016-8926 MEDIUM
4.3 Apr 14

IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could allow a remote attacker to read system files or

CVE-2014-6150 LOW
3.5 Oct 31

Cross-site scripting (XSS) vulnerability in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.1.0 through

CVE-2012-5942 LOW
3.5 Mar 06

Cross-site scripting (XSS) vulnerability in the Data Management Portal Web User Interface in IBM Tivoli Application Depe
CVE-2012-5939 LOW
3.5 Mar 06

Cross-site scripting (XSS) vulnerability in Welcome.do in the Data Management Portal Web User Interface in IBM Tivoli Ap
CVE-2014-6148 LOW
3.5 Oct 31

IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.0.0 through 7.2.0.10, 7.2.1.0 through 7.2.1.6, and 7.2.2
CVE-2013-3004 LOW
3.5 Jul 01

Directory traversal vulnerability in BIRT-Report Viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7

Same weakness CWE-16 – Configuration

View all
CVE-2012-5613 MEDIUM POC
6.0
CVE-2017-6639 CRITICAL
9.8
CVE-2022-43516 CRITICAL POC
9.8
CVE-2014-8657 MEDIUM POC
5.0
CVE-2012-0147 MEDIUM
5.0
CVE-2012-6050 MEDIUM POC
6.4
CVE-2014-8652 MEDIUM POC
5.0
CVE-2019-16760 HIGH POC
7.5

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2012-5770 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy