CVE-2013-0510

Published: Mar 29, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 includes a security test that sends session cookies to a specific external server, which allows man-in-the-middle attackers to hijack the test account by capturing these cookies.

Affected (12)

Products: Ibm: Security Appscan

Ibm

1 product

Security Appscan

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Appscan	Version 5.6.0.0
Ibm Security Appscan	Version 8.0.0.0
Ibm Security Appscan	Version 8.0.0.1
Ibm Security Appscan	Version 8.0.0.2
Ibm Security Appscan	Version 8.0.1.0
Ibm Security Appscan	Version 8.0.1.1
Ibm Security Appscan	Version 8.0.11
Ibm Security Appscan	Version 8.5.0.0
Ibm Security Appscan	Version 8.5.0.1
Ibm Security Appscan	Version 8.6.0.0
Ibm Security Appscan	Version 8.6.0.1
Ibm Security Appscan	Version 8.6.0.2

Related CWEs

CWE-264

References (4)

http://www-01.ibm.com/support/docview.wss?uid=swg21626264

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/82592

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg21626264

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/82592

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.