QwikSec

Security Database

CVE

CWE

Training

CVE-2013-3989

Published: Oct 25, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

IBM Security AppScan Enterprise 8.x before 8.8 sends a cleartext AppScan Source database password in a response, which allows remote authenticated users to obtain sensitive information, and subsequently conduct man-in-the-middle attacks, by examining the response content.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

appscan-cve20133989-info-disclosure(84975)

vdb-entry

x_refsource_XF

http://www-01.ibm.com/support/docview.wss?uid=swg21653287

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.