CVE-2012-5770

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-03-06 · updated 2026-06-16
Weakness: CWE-16

Description

The SSL configuration in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 supports the MD5 hash algorithm, which makes it easier for man-in-the-middle attackers to spoof servers and decrypt network traffic via a brute-force attack.

Affected products

IBM Tivoli Application Dependency Discovery Manager: 7.2.0.0, 7.2.1, 7.2.1.3

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IV32391
http://www-01.ibm.com/support/docview.wss?uid=swg21626029
https://exchange.xforce.ibmcloud.com/vulnerabilities/80354
http://www-01.ibm.com/support/docview.wss?uid=swg1IV32391
http://www-01.ibm.com/support/docview.wss?uid=swg21626029
https://exchange.xforce.ibmcloud.com/vulnerabilities/80354

Get alerted when CVE-2012-5770 or the next vulnerability affects your stack