CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:S/C:P/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
44.0%
IBM Security AppScan Enterprise before 8.7 does not invalidate the session context upon a logout action, which allows remote attackers to hijack sessions by leveraging an unattended workstation.
Vendor | Product | Version | CPE |
---|---|---|---|
ibm | security_appscan | * | cpe:2.3:a:ibm:security_appscan:*:-:enterprise:*:*:*:*:* |
ibm | security_appscan | 5.6.0.0 | cpe:2.3:a:ibm:security_appscan:5.6.0.0:-:enterprise:*:*:*:*:* |
ibm | security_appscan | 6.0.0.0 | cpe:2.3:a:ibm:security_appscan:6.0.0.0:-:enterprise:*:*:*:*:* |
ibm | security_appscan | 6.0.1.0 | cpe:2.3:a:ibm:security_appscan:6.0.1.0:-:enterprise:*:*:*:*:* |
ibm | security_appscan | 6.0.2.0 | cpe:2.3:a:ibm:security_appscan:6.0.2.0:-:enterprise:*:*:*:*:* |
ibm | security_appscan | 6.1.1.0 | cpe:2.3:a:ibm:security_appscan:6.1.1.0:-:enterprise:*:*:*:*:* |
ibm | security_appscan | 8.0.0.0 | cpe:2.3:a:ibm:security_appscan:8.0.0.0:-:enterprise:*:*:*:*:* |
ibm | security_appscan | 8.0.0.1 | cpe:2.3:a:ibm:security_appscan:8.0.0.1:-:enterprise:*:*:*:*:* |
ibm | security_appscan | 8.0.0.2 | cpe:2.3:a:ibm:security_appscan:8.0.0.2:-:enterprise:*:*:*:*:* |
ibm | security_appscan | 8.0.1.0 | cpe:2.3:a:ibm:security_appscan:8.0.1.0:-:enterprise:*:*:*:*:* |