CVE-2012-2191

no score yetEPSS 3.9%

IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, does not properly validate data during execution of a protection mechanism against the Vaudenay SSL CBC timing attack, which allows remote attackers to cause a denial of service (application crash) via crafted values in the TLS Record Layer, a different vulnerability than CVE-2012-2333.

EPSS: 3.9% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2012-08-08
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ibm:global_security_kit
ibm:rational_directory_server
ibm:tivoli_directory_server

References

http://secunia.com/advisories/51279
http://www-01.ibm.com/support/docview.wss?uid=swg1IV31980
http://www-01.ibm.com/support/docview.wss?uid=swg1IV31981
http://www-01.ibm.com/support/docview.wss?uid=swg21606145
http://www.securityfocus.com/bid/54743

Check your stack JSON