VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Apr 22, 2012· Updated Apr 29, 2026

CVE-2012-0726

CVE-2012-0726

Description

The default configuration of TLS in IBM Tivoli Directory Server (TDS) 6.3 and earlier supports the (1) NULL-MD5 and (2) NULL-SHA ciphers, which allows remote attackers to trigger unencrypted communication via the TLS Handshake Protocol.

Affected products

19
  • IBM/Tivoli Directory Server19 versions
    cpe:2.3:a:ibm:tivoli_directory_server:*:*:*:*:*:*:*:*+ 18 more
    • cpe:2.3:a:ibm:tivoli_directory_server:*:*:*:*:*:*:*:*range: <=6.3.0
    • cpe:2.3:a:ibm:tivoli_directory_server:3.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tivoli_directory_server:4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tivoli_directory_server:5.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tivoli_directory_server:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tivoli_directory_server:6.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.8:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tivoli_directory_server:6.0.0.69:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tivoli_directory_server:6.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.45:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.46:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.47:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tivoli_directory_server:6.1.0.48:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tivoli_directory_server:6.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.19:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.20:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.21:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:tivoli_directory_server:6.2.0.22:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

7

News mentions

0

No linked articles in our index yet.