Lucene search
HistoryNov 13, 2013 - 3:55 p.m.
CVE-2013-5450
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:P/A:N
6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
47.3%
IBM Security AppScan Enterprise 8.5 through 8.7.0.1, when Jazz authentication is enabled, allows man-in-the-middle attackers to obtain sensitive information or modify data by leveraging an improperly protected URL to obtain a session token.
Affected configurations
Node
ibmsecurity_appscanMatch8.5.0.0-enterprise
ORibmsecurity_appscanMatch8.5.0.1-enterprise
ORibmsecurity_appscanMatch8.6.0.0-enterprise
ORibmsecurity_appscanMatch8.6.0.1-enterprise
ORibmsecurity_appscanMatch8.6.0.2-enterprise
ORibmsecurity_appscanMatch8.7.0.0-enterprise
ORibmsecurity_appscanMatch8.7.0.1-enterprise
Related
cvelist
cvelist
CVE-2013-5450
2013-11-13 15:00:00
cve
cve
CVE-2013-5450
2013-11-13 15:55:03
prion
prion
Authentication flaw
2013-11-13 15:55:00
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:P/A:N
6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
47.3%
Related for NVD:CVE-2013-5450