CVE-2012-0726

Name of the Vulnerable Software and Affected Versions IBM Tivoli Directory Server versions 6.3 and earlier

Description The default configuration of TLS in the software supports the NULL-MD5 and NULL-SHA ciphers, allowing remote attackers to trigger unencrypted communication via the TLS Handshake Protocol.

Recommendations For versions 6.3 and earlier, consider disabling the NULL-MD5 and NULL-SHA ciphers to prevent unencrypted communication. As a temporary workaround, restrict access to the TLS Handshake Protocol until a more secure configuration can be implemented.