PT-2013-2395
CVE-2013-0510
·
تاريخ النشر
2013-03-29
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Security AppScan Enterprise versions 5.6 and 8.x through 8.6
Description
The issue allows man-in-the-middle attackers to hijack the test account by capturing session cookies sent to a specific external server.
Recommendations
For IBM Security AppScan Enterprise version 5.6, update to a version that does not send session cookies to external servers.
For IBM Security AppScan Enterprise versions 8.x through 8.6, update to version 8.7 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾