Unscored CVE-2012-2549 EUVD-2012-2535GHSA-wrg5-fhgm-vwvq

The IP-HTTPS server in Windows Server 2008 R2 and R2 SP1 and Server 2012 does not properly validate certificates, which allows remote attac…

Published Dec 12, 2012 · Updated Aug 6, 2024 · Assigned by microsoft

Description

The IP-HTTPS server in Windows Server 2008 R2 and R2 SP1 and Server 2012 does not properly validate certificates, which allows remote attackers to bypass intended access restrictions via a revoked certificate, aka "Revoked Certificate Bypass Vulnerability."

References

TA12-346A third-party-advisory
MS12-083 vendor-advisory
oval:org.mitre.oval:def:16117 vdb-entry signature