CVE-2012-2203: High severity ibm global security kit vulnerability
IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, uses the PKCS #12 file format for certificate objects without enforcing file integrity, which makes it easier for remote attackers to spoof SSL servers via vectors involving insertion of an arbitrary root Certification Authority (CA) certificate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2203?
CVE-2012-2203 is classified as a medium severity vulnerability due to the potential for spoofing attacks.
How do I fix CVE-2012-2203?
To remediate CVE-2012-2203, update the IBM Global Security Kit to version 8.0.14.22 or higher.
Which products are affected by CVE-2012-2203?
CVE-2012-2203 affects IBM Global Security Kit versions before 8.0.14.22, as well as IBM Rational Directory Server and IBM Tivoli Directory Server.
Can CVE-2012-2203 be exploited remotely?
Yes, CVE-2012-2203 can be exploited by remote attackers to spoof SSL servers.
Is there a workaround for CVE-2012-2203 if I cannot upgrade?
There is no specific workaround for CVE-2012-2203; upgrading to the latest version is strongly recommended.