Vulnerability in Ibm Security Appscan

CVE-2013-0531

The SSL implementation in IBM Security AppScan Enterprise before 8.7.0.1 enables cipher suites with weak encryption algorithms, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.007 (50.2th percentile) — read the EPSS interpretation.

Affected products

Ibm Security_appscan — versions 5.6.0.0, 6.0.0.0, 6.0.1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@us.ibm.com (vdb-entry, x_refsource_XF)