CVE-2014-6136

Опубликовано: 02 фев. 2015

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

IBM Security AppScan Standard 8.x and 9.x before 9.0.1.1 FP1 supports unencrypted sessions, which allows remote attackers to obtain sensitive information by sniffing the network.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_appscan:8.0.0.0:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:security_appscan:8.0.0.1:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:security_appscan:8.0.0.2:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:security_appscan:8.0.0.3:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:security_appscan:8.5.0.0:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:security_appscan:8.5.0.1:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:security_appscan:8.6.0.0:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:security_appscan:8.6.0.1:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:security_appscan:8.7.0.0:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:security_appscan:8.7.0.1:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:security_appscan:8.8.0.0:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:security_appscan:9.0.0.0:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:security_appscan:9.0.0.1:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:security_appscan:9.0.1.0:*:*:*:standard:*:*:*

cpe:2.3:a:ibm:security_appscan:9.0.1.1:*:*:*:standard:*:*:*

EPSS

Процентиль: 45%

0.00225

Низкий

5 Medium

CVSS2

Дефекты

CWE-310

Связанные уязвимости

GHSA-96j7-hp6f-9w4x

github

больше 3 лет назад