{"api_version":"1","generated_at":"2026-07-23T03:25:15+00:00","cve":"CVE-2012-2203","urls":{"html":"https://cve.report/CVE-2012-2203","api":"https://cve.report/api/cve/CVE-2012-2203.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2012-2203","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-2203"},"summary":{"title":"CVE-2012-2203","description":"IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, uses the PKCS #12 file format for certificate objects without enforcing file integrity, which makes it easier for remote attackers to spoof SSL servers via vectors involving insertion of an arbitrary root Certification Authority (CA) certificate.","state":"PUBLISHED","assigner":"ibm","published_at":"2012-08-08 10:26:18","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV31973","name":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV31973","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IV31973: SYSROUTE OF IV31970:GSKIT TRUST ANCHOR VULNERABILITY IN TIVOLI ACCESS MANAGER FOR E-BUSINESS (CVE-2012-2203)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21606145","name":"http://www-01.ibm.com/support/docview.wss?uid=swg21606145","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"IBM Security Bulletin: Multiple vulnerabilities in Rational Directory Server (CVE-2012-2203, CVE-2012-2191) - United States","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/54743","name":"http://www.securityfocus.com/bid/54743","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM Multiple Products Global Security Toolkit Security Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV31975","name":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV31975","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IV31975: SYSROUTE OF IV31975:GSKIT TRUST ANCHOR VULNERABILITY IN TIVOLI ACCESS MANAGER FOR E-BUSINESS (CVE-2012-2203)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/77280","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/77280","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/51279","name":"http://secunia.com/advisories/51279","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Security Advisory SA51279 - IBM Tivoli Access Manager for e-business GSKIT Vulnerabilities - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-2203","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2203","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2012","cve_id":"2203","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"global_security_kit","cpe6":"7.0.4.28","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2203","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"global_security_kit","cpe6":"7.0.4.29","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2203","vulnerable":"1","versionEndIncluding":"8.0.13","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"global_security_kit","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2203","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"rational_directory_server","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"2203","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"tivoli_directory_server","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T19:26:08.924Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"rds-gskit-pkcs-spoofing(77280)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/77280"},{"name":"51279","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/51279"},{"name":"IV31975","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV31975"},{"name":"54743","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/54743"},{"name":"IV31973","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV31973"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21606145"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2012-07-31T00:00:00.000Z","descriptions":[{"lang":"en","value":"IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, uses the PKCS #12 file format for certificate objects without enforcing file integrity, which makes it easier for remote attackers to spoof SSL servers via vectors involving insertion of an arbitrary root Certification Authority (CA) certificate."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","shortName":"ibm"},"references":[{"name":"rds-gskit-pkcs-spoofing(77280)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/77280"},{"name":"51279","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/51279"},{"name":"IV31975","tags":["vendor-advisory","x_refsource_AIXAPAR"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV31975"},{"name":"54743","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/54743"},{"name":"IV31973","tags":["vendor-advisory","x_refsource_AIXAPAR"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV31973"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21606145"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","ID":"CVE-2012-2203","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, uses the PKCS #12 file format for certificate objects without enforcing file integrity, which makes it easier for remote attackers to spoof SSL servers via vectors involving insertion of an arbitrary root Certification Authority (CA) certificate."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"rds-gskit-pkcs-spoofing(77280)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/77280"},{"name":"51279","refsource":"SECUNIA","url":"http://secunia.com/advisories/51279"},{"name":"IV31975","refsource":"AIXAPAR","url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV31975"},{"name":"54743","refsource":"BID","url":"http://www.securityfocus.com/bid/54743"},{"name":"IV31973","refsource":"AIXAPAR","url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV31973"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21606145","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21606145"}]}}}},"cveMetadata":{"assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","assignerShortName":"ibm","cveId":"CVE-2012-2203","datePublished":"2012-08-08T10:00:00.000Z","dateReserved":"2012-04-04T00:00:00.000Z","dateUpdated":"2024-08-06T19:26:08.924Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2012-08-08 10:26:18","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:global_security_kit:*:*:*:*:*:*:*:*","versionEndIncluding":"8.0.13","matchCriteriaId":"FDD46A9C-9DB2-4B61-BCEA-DC5AB03DCD7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:global_security_kit:7.0.4.28:*:*:*:*:*:*:*","matchCriteriaId":"2FD561AD-2421-4AA6-B3C5-6536F6933526"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:global_security_kit:7.0.4.29:*:*:*:*:*:*:*","matchCriteriaId":"00E509BA-4B47-4EDE-86DC-2E666D2D74E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_directory_server:*:*:*:*:*:*:*:*","matchCriteriaId":"0651DE7C-B8EB-4214-981B-561256C5473A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_directory_server:*:*:*:*:*:*:*:*","matchCriteriaId":"871E249E-CB31-46A4-9E4F-274C6055C33A"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2012","CveId":"2203","Ordinal":"1","Title":"CVE-2012-2203","CVE":"CVE-2012-2203","Year":"2012"},"notes":[{"CveYear":"2012","CveId":"2203","Ordinal":"1","NoteData":"IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, uses the PKCS #12 file format for certificate objects without enforcing file integrity, which makes it easier for remote attackers to spoof SSL servers via vectors involving insertion of an arbitrary root Certification Authority (CA) certificate.","Type":"Description","Title":"CVE-2012-2203"},{"CveYear":"2012","CveId":"2203","Ordinal":"2","NoteData":"2012-08-08","Type":"Other","Title":"Published"},{"CveYear":"2012","CveId":"2203","Ordinal":"3","NoteData":"2017-08-28","Type":"Other","Title":"Modified"}]}}}