CVE-2012-2191
IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server,...
CVE-2012-2191 is a medium vulnerability (CVSS 5.0) in Ibm Global Security Kit, published August 8, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.88%, the 90th percentile. No source names a fixed version.
IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, does not properly validate data during execution of a protection mechanism against the Vaudenay SSL CBC timing attack, which allows remote attackers to cause a denial of service (application crash) via crafted values in the TLS Record Layer, a different vulnerability than CVE-2012-2333.
Exploit likelihood
What each source reports
NVD Score used
IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, does not properly validate data during execution of a protection mechanism against the Vaudenay SSL CBC timing attack, which allows remote attackers to cause a denial of service (application crash) via crafted values in the TLS Record Layer, a different vulnerability than CVE-2012-2333.
- Record
CVE-2012-2191- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, does not properly validate data during execution of a protection mechanism against the Vaudenay SSL CBC timing attack, which allows remote attackers to cause a denial of service (application crash) via crafted values in the TLS Record Layer, a different vulnerability than CVE-2012-2333.
- Record
CVE-2012-2191- Updated
- 2026-11-02
EUVDEUVD-2012-2185 No score
IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, does not properly validate data during execution of a protection mechanism against the Vaudenay SSL CBC timing attack, which allows remote attackers to cause a denial of service (application crash) via crafted values in the TLS Record Layer, a different vulnerability than CVE-2012-2333.
- Record
EUVD-2012-2185- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9f2v-g758-7mf3 No score
IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server,...
IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other products, does not properly validate data during execution of a protection mechanism against the Vaudenay SSL CBC timing attack, which allows remote attackers to cause a denial of service (application crash) via crafted values in the TLS Record Layer, a different vulnerability than CVE-2012-2333.
- Record
GHSA-9f2v-g758-7mf3- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
www-01.ibm.com/support/docview.wss?uid=swg1IV31980
secunia.com/advisories/51279
exchange.xforce.ibmcloud.com/vulnerabilities/75996
securityfocus.com/bid/54743
nvd.nist.gov/vuln/detail/CVE-2012-2191
github.com/advisories/GHSA-9f2v-g758-7mf3