Description
The default configuration of TLS in IBM Tivoli Directory Server (TDS) 6.3 and earlier supports the (1) NULL-MD5 and (2) NULL-SHA ciphers, which allows remote attackers to trigger unencrypted communication via the TLS Handshake Protocol.
References (7)
Core 7
Core References
Various Sources vendor-advisory
x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=swg1IO15761
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/74303
Various Sources vendor-advisory
x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=swg1IO16036
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21591272
Various Sources vendor-advisory
x_refsource_aixapar
http://www.ibm.com/support/docview.wss?uid=swg1IO16035
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1026939
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/53043
Scores
EPSS
0.0231
EPSS Percentile
81.6%
Details
CWE
CWE-310
Status
published
Products (19)
ibm/tivoli_directory_server
3.2.2
ibm/tivoli_directory_server
4.1
ibm/tivoli_directory_server
5.2.0
ibm/tivoli_directory_server
6.0
ibm/tivoli_directory_server
6.0.0
ibm/tivoli_directory_server
6.0.0.7
ibm/tivoli_directory_server
6.0.0.8
ibm/tivoli_directory_server
6.0.0.69
ibm/tivoli_directory_server
6.1.0
ibm/tivoli_directory_server
6.1.0.45
... and 9 more
Published
Apr 22, 2012
Tracked Since
Feb 18, 2026