CVE-2013-5450

Published: Nov 13, 2013Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:N

Exploitability: 4.9 / Impact: 4.9

Source: NVD

Description

IBM Security AppScan Enterprise 8.5 through 8.7.0.1, when Jazz authentication is enabled, allows man-in-the-middle attackers to obtain sensitive information or modify data by leveraging an improperly protected URL to obtain a session token.

Affected (7)

Products: Ibm: Security Appscan

Ibm

1 product

Security Appscan

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Appscan	Version 8.5.0.0
Ibm Security Appscan	Version 8.5.0.1
Ibm Security Appscan	Version 8.6.0.0
Ibm Security Appscan	Version 8.6.0.1
Ibm Security Appscan	Version 8.6.0.2
Ibm Security Appscan	Version 8.7.0.0
Ibm Security Appscan	Version 8.7.0.1

Related CWEs

CWE-255

References (4)

http://www-01.ibm.com/support/docview.wss?uid=swg21655578

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/88190

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg21655578

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/88190

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.