CVE-2012-3431

CVE-2012-3431 describes a vulnerability in the Teiid JDBC socket within JBoss Enterprise Data Services Platform versions prior to 5.3.0, where login messages are not encrypted by default despite documentation. This oversight allows remote attackers to intercept login credentials through a man-in-the-middle (MITM) attack. The vulnerability has a CVSS score of 4.3, indicating a medium attack complexity with potential for partial confidentiality impact. There is no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.