Description
The default configuration of TLS in IBM Tivoli Directory Server (TDS) 6.3 and earlier supports the (1) NULL-MD5 and (2) NULL-SHA ciphers, which allows remote attackers to trigger unencrypted communication via the TLS Handshake Protocol.
References
- IO15761 vendor-advisory
- tds-nullcipher-weak-security(74303) vdb-entry
- 1026939 vdb-entry
- IO16036 vendor-advisory
- 53043 vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg21591272
- IO16035 vendor-advisory