CVE-2012-0732: IBM Rational Appscan

Medium severity, CVSS 5.8. EPSS: 0.6% chance of exploitation in the next 30 days.

The Enterprise Console client in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected products

• IBM Rational Appscan: version 5.2 only; version 5.4 only; version 5.5.0 only; version 5.5.0.1 only; version 5.5.0.2 only; version 5.6.0 only; …

Published 2012-05-03. Last modified 2026-06-16.