CVE-2014-6136 IBM Security AppScan Standard 8.x and 9.x before 9.0.1.1 FP1 supports unencrypted sessions, which allows remote attackers to obtain sensitive information by sniffing the network.
MediumCVSS 5.0
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Security AppScan Standard 8.x and 9.x before 9.0.1.1 FP1 supports unencrypted sessions, which allows remote attackers to obtain sensitive information by sniffing the network.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm security appscan | = 8.0.0.0 | No fix listed |
| ibm security appscan | = 8.0.0.1 | No fix listed |
| ibm security appscan | = 8.0.0.2 | No fix listed |
| ibm security appscan | = 8.0.0.3 | No fix listed |
| ibm security appscan | = 8.5.0.0 | No fix listed |
| ibm security appscan | = 8.5.0.1 | No fix listed |
| ibm security appscan | = 8.6.0.0 | No fix listed |
| ibm security appscan | = 8.6.0.1 | No fix listed |
| ibm security appscan | = 8.7.0.0 | No fix listed |
| ibm security appscan | = 8.7.0.1 | No fix listed |
| ibm security appscan | = 8.8.0.0 | No fix listed |
| ibm security appscan | = 9.0.0.0 | No fix listed |
| ibm security appscan | = 9.0.0.1 | No fix listed |
| ibm security appscan | = 9.0.1.0 | No fix listed |
| ibm security appscan | = 9.0.1.1 | No fix listed |
References
- www-01.ibm.com vendor-advisory
- ibm-appscan-cve20146136-info-disc(96816) vdb-entry