CVE-2013-5450

Name of the Vulnerable Software and Affected Versions IBM Security AppScan Enterprise versions 8.5 through 8.7.0.1

Description The issue allows man-in-the-middle attackers to obtain sensitive information or modify data by leveraging an improperly protected URL to obtain a session token when Jazz authentication is enabled.

Recommendations For versions 8.5 through 8.7.0.1, as a temporary workaround, consider restricting access to the improperly protected URL to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.