CVE-2013-5453

Published: Nov 13, 2013Modified: Apr 29, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

IBM Security AppScan Enterprise 5.6 through 8.7.0.1 allows remote authenticated users to read arbitrary report files by leveraging knowledge of filenames that cannot be easily predicted.

Affected (18)

Products: Ibm: Security Appscan

Ibm

1 product

Security Appscan

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Appscan	Version 5.6.0.0
Ibm Security Appscan	Version 6.0.0.0
Ibm Security Appscan	Version 6.0.1.0
Ibm Security Appscan	Version 6.0.2.0
Ibm Security Appscan	Version 6.1.1.0
Ibm Security Appscan	Version 8.0.0.0
Ibm Security Appscan	Version 8.0.0.1
Ibm Security Appscan	Version 8.0.0.2
Ibm Security Appscan	Version 8.0.1.0
Ibm Security Appscan	Version 8.0.1.1
Ibm Security Appscan	Version 8.0.11
Ibm Security Appscan	Version 8.5.0.0
Ibm Security Appscan	Version 8.5.0.1
Ibm Security Appscan	Version 8.6.0.0
Ibm Security Appscan	Version 8.6.0.1
Ibm Security Appscan	Version 8.6.0.2
Ibm Security Appscan	Version 8.7.0.0
Ibm Security Appscan	Version 8.7.0.1

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

http://www-01.ibm.com/support/docview.wss?uid=swg21655578

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/88193

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg21655578

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/88193

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.