CVE-2012-2203

CVE-2012-2203 describes a vulnerability in IBM Global Security Kit (GSKit) versions prior to 8.0.14.22, affecting products like IBM Rational Directory Server and IBM Tivoli Directory Server. The flaw stems from GSKit's failure to enforce file integrity when using the PKCS #12 format for certificate objects. This allows remote attackers to spoof SSL servers by inserting an arbitrary root Certification Authority certificate. The vulnerability carries a CVSS score of 7.5, indicating high severity with a network-based attack vector and low attack complexity, requiring no authentication. Successful exploitation could lead to partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.