Design/Logic Flaw

2013-03-2916:09:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.3%

JSON

IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 includes a security test that sends session cookies to a specific external server, which allows man-in-the-middle attackers to hijack the test account by capturing these cookies.

CPENameOperatorVersion
security_appscaneq8.0.0.0 enterprise
security_appscaneq8.5.0.0 enterprise
security_appscaneq5.6.0.0 enterprise
security_appscaneq8.6.0.2 enterprise
security_appscaneq8.5.0.1 enterprise
security_appscaneq8.0.1.0 enterprise
security_appscaneq8.0.11 enterprise
security_appscaneq8.0.0.2 enterprise
security_appscaneq8.6.0.0 enterprise
security_appscaneq8.0.0.1 enterprise

Name	Operator	Version
security_appscan	eq	8.0.0.0 enterprise
security_appscan	eq	8.5.0.0 enterprise
security_appscan	eq	5.6.0.0 enterprise
security_appscan	eq	8.6.0.2 enterprise
security_appscan	eq	8.5.0.1 enterprise
security_appscan	eq	8.0.1.0 enterprise
security_appscan	eq	8.0.11 enterprise
security_appscan	eq	8.0.0.2 enterprise
security_appscan	eq	8.6.0.0 enterprise
security_appscan	eq	8.0.0.1 enterprise