Lucene search
HistoryNov 13, 2013 - 3:55 p.m.
CVE-2013-5450
ibm
security
appscan
enterprise
8.5
8.7.0.1
jazz
authentication
vulnerability
man-in-the-middle
url
session token
nvd
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:P/A:N
6.2 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
47.5%
IBM Security AppScan Enterprise 8.5 through 8.7.0.1, when Jazz authentication is enabled, allows man-in-the-middle attackers to obtain sensitive information or modify data by leveraging an improperly protected URL to obtain a session token.
Affected configurations
Node
ibmsecurity_appscanMatch8.5.0.0-enterprise
ORibmsecurity_appscanMatch8.5.0.1-enterprise
ORibmsecurity_appscanMatch8.6.0.0-enterprise
ORibmsecurity_appscanMatch8.6.0.1-enterprise
ORibmsecurity_appscanMatch8.6.0.2-enterprise
ORibmsecurity_appscanMatch8.7.0.0-enterprise
ORibmsecurity_appscanMatch8.7.0.1-enterprise
Related
cvelist
cvelist
CVE-2013-5450
2013-11-13 15:00:00
nvd
nvd
CVE-2013-5450
2013-11-13 15:55:03
prion
prion
Authentication flaw
2013-11-13 15:55:00
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:P/A:N
6.2 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
47.5%
Related for CVE-2013-5450