CVE-2012-4829 Weak cryptography in n/a
Man-in-the-middle attackers can spoof servers due to reliance on a default X.509 certificate for authentication in IBM XIV Storage Systems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2012-4829?
CVE-2012-4829 is a medium-severity vulnerability in n/a, published on 16 Apr 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
IBM XIV Storage System Gen3 before 11.2 relies on a default X.509 v3 certificate for authentication, which allows man-in-the-middle attackers to spoof servers by leveraging an inappropriate certificate-trust relationship.
Weakness: CWE-310
Which versions are affected by CVE-2012-4829?
It affects 1 product.
Products include Ibm Xiv Storage System Gen3.
How do I fix CVE-2012-4829?
No fix has been published for CVE-2012-4829 yet. Limit exposure of the affected software until one is available.
Is CVE-2012-4829 being exploited?
There is no known exploitation of CVE-2012-4829 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-jr89-w7j9-j5m5.