Vulnerability in IBM Security Appscan

CVE-2013-0510

IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 includes a security test that sends session cookies to a specific external server, which allows man-in-the-middle attackers to hijack the test account by capturing these cookies.

EPSS: 0.009 (54.7th percentile) — read the EPSS interpretation.

Affected products

Ibm Security_appscan — versions 5.6.0.0, 8.0.0.0, 8.0.0.1
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

psirt@us.ibm.com (vdb-entry, x_refsource_XF)
psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)