NetSight
IP …
medium6.4

CVE-2012-0726

The default configuration of TLS in IBM Tivoli Directory Server (TDS) 6.3 and earlier supports the (1) NULL-MD5 and (2) NULL-SHA ciphers, which allows remote a…

Impact

The default configuration of TLS in IBM Tivoli Directory Server (TDS) 6.3 and earlier supports the (1) NULL-MD5 and (2) NULL-SHA ciphers, which allows remote attackers to trigger unencrypted communication via the TLS Handshake Protocol.

Affected products

VendorProductAffected versions
IbmTivoli Directory Server
through 6.3.0
Versions 3.2.2, 4.1, 5.2.0, 6.0, 6.0.0

Weakness classification

CWE-310

References