Authentication flaw

2013-11-1315:55:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.3%

JSON

IBM Security AppScan Enterprise 8.5 through 8.7.0.1, when Jazz authentication is enabled, allows man-in-the-middle attackers to obtain sensitive information or modify data by leveraging an improperly protected URL to obtain a session token.

CPENameOperatorVersion
security_appscaneq8.5.0.0 enterprise
security_appscaneq8.6.0.2 enterprise
security_appscaneq8.7.0.0 enterprise
security_appscaneq8.5.0.1 enterprise
security_appscaneq8.6.0.0 enterprise
security_appscaneq8.7.0.1 enterprise
security_appscaneq8.6.0.1 enterprise

Name	Operator	Version
security_appscan	eq	8.5.0.0 enterprise
security_appscan	eq	8.6.0.2 enterprise
security_appscan	eq	8.7.0.0 enterprise
security_appscan	eq	8.5.0.1 enterprise
security_appscan	eq	8.6.0.0 enterprise
security_appscan	eq	8.7.0.1 enterprise
security_appscan	eq	8.6.0.1 enterprise