PT-2013-2395

CVE-2013-0510

·

Published

2013-03-29

·

Updated

2017-08-29

Description by

CVSS 2.0
4.3
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions IBM Security AppScan Enterprise versions 5.6 and 8.x through 8.6
Description The issue allows man-in-the-middle attackers to hijack the test account by capturing session cookies sent to a specific external server.
Recommendations For IBM Security AppScan Enterprise version 5.6, update to a version that does not send session cookies to external servers. For IBM Security AppScan Enterprise versions 8.x through 8.6, update to version 8.7 or later.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2013-0510
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com