CVE-2012-5662: x3270 before 3.3.12ga12 does not verify that the server hostname matches a domain name in the subject's Com...

Security readout for executives and security teams

x3270 clients before 3.3.12ga12 did not properly confirm that an SSL server certificate belonged to the server being reached. A person in the network path could potentially impersonate a trusted server using any valid certificate, exposing terminal sessions to interception or tampering. Exposure is most likely where x3270 is used for SSL-protected 3270 terminal connectivity, especially over shared, remote, or untrusted networks. The source bundle does not provide complete affected CPE data or platform packaging details. Treat this as a targeted exposure issue, not a broad internet emergency. Prioritize if x3270 supports sensitive mainframe access, remote administration, regulated data workflows, or users connecting over networks the organization does not fully control. Mitigation focus: Identify systems running x3270 and record installed versions.; Upgrade x3270 to 3.3.12ga12 or later where vendor packaging confirms the fix.; Check Red Hat or distribution guidance for backported fixes..

Prepared

Jun 14, 2026, 07:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.