PT-2013-5539
CVE-2013-5430
·
Published
2013-10-28
·
Updated
2017-08-29
Description by
CVSS 2.0
5.5
MediumMetricsAV:N/AC:L/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
IBM Security AppScan Enterprise versions 8.0 through 8.7
Description
The issue concerns a default username and password in the Jazz Team Server component, which can be exploited by remote authenticated users to gain unspecified access. This can occur in environments where the component is installed with applicable details.
Recommendations
For versions 8.0 through 8.7, update to version 8.8 or later to resolve the issue. As a temporary workaround, consider changing the default username and password for the Jazz Team Server component to prevent unauthorized access. Restrict access to the component until the update is applied to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾