Vulnerability in Ibm Xiv Storage System Gen3

CVE-2012-4829

IBM XIV Storage System Gen3 before 11.2 relies on a default X.509 v3 certificate for authentication, which allows man-in-the-middle attackers to spoof servers by leveraging an inappropriate certificate-trust relationship.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.005 (42.7th percentile) — read the EPSS interpretation.

Affected products

Ibm Xiv_storage_system_gen3
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

psirt@us.ibm.com (vdb-entry, x_refsource_XF)
psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)