Vulnerabilities > IBM > Rational Policy Tester > 5.5.0.2
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2012-12-28 | CVE-2012-0741 | Improper Input Validation vulnerability in IBM Rational Policy Tester and Security Appscan IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during use of the Manual Explore Proxy feature, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary certificate. | 5.8 |
| 2012-12-28 | CVE-2012-0738 | Improper Input Validation vulnerability in IBM Rational Policy Tester and Security Appscan IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during scanning, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary certificate. | 5.8 |