CVE-2014-8918

Published: Feb 2, 2015Modified: May 6, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

IBM Security AppScan Standard 8.x and 9.x before 9.0.1.1 FP1 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected (15)

Products: Ibm: Security Appscan

Ibm

1 product

Security Appscan

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Appscan	Version 8.0.0.0
Ibm Security Appscan	Version 8.0.0.1
Ibm Security Appscan	Version 8.0.0.2
Ibm Security Appscan	Version 8.0.0.3
Ibm Security Appscan	Version 8.5.0.0
Ibm Security Appscan	Version 8.5.0.1
Ibm Security Appscan	Version 8.6.0.0
Ibm Security Appscan	Version 8.6.0.1
Ibm Security Appscan	Version 8.7.0.0
Ibm Security Appscan	Version 8.7.0.1
Ibm Security Appscan	Version 8.8.0.0
Ibm Security Appscan	Version 9.0.0.0
Ibm Security Appscan	Version 9.0.0.1
Ibm Security Appscan	Version 9.0.1.0
Ibm Security Appscan	Version 9.0.1.1

Related CWEs

CWE-310

References (4)

http://www-01.ibm.com/support/docview.wss?uid=swg21695170

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/99304

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg21695170

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/99304

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.