Lucene search

[email protected]CVE-2013-0531

HistorySep 08, 2013 - 4:55 p.m.

CVE-2013-0531

2013-09-0816:55:06

CWE-310

[email protected]

web.nvd.nist.gov

cve-2013-0531

ssl

ibm security appscan enterprise

vulnerability

encryption

sniffing

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.7%

JSON

The SSL implementation in IBM Security AppScan Enterprise before 8.7.0.1 enables cipher suites with weak encryption algorithms, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.

Affected configurations

NVD

Node

ibmsecurity_appscanRange≤8.7.0.0-enterprise

ibmsecurity_appscanMatch5.6.0.0-enterprise

ibmsecurity_appscanMatch6.0.0.0-enterprise

ibmsecurity_appscanMatch6.0.1.0-enterprise

ibmsecurity_appscanMatch6.0.2.0-enterprise

ibmsecurity_appscanMatch6.1.1.0-enterprise

ibmsecurity_appscanMatch8.0.0.0-enterprise

ibmsecurity_appscanMatch8.0.0.1-enterprise

ibmsecurity_appscanMatch8.0.0.2-enterprise

ibmsecurity_appscanMatch8.0.1.0-enterprise

ibmsecurity_appscanMatch8.0.1.1-enterprise

ibmsecurity_appscanMatch8.0.11-enterprise

ibmsecurity_appscanMatch8.5.0.0-enterprise

ibmsecurity_appscanMatch8.5.0.1-enterprise

ibmsecurity_appscanMatch8.6.0.0-enterprise

ibmsecurity_appscanMatch8.6.0.1-enterprise

ibmsecurity_appscanMatch8.6.0.2-enterprise

CPENameOperatorVersion
ibm:security_appscanibm security appscanle8.7.0.0
ibm:security_appscanibm security appscaneq5.6.0.0
ibm:security_appscanibm security appscaneq6.0.0.0
ibm:security_appscanibm security appscaneq6.0.1.0
ibm:security_appscanibm security appscaneq6.0.2.0
ibm:security_appscanibm security appscaneq6.1.1.0
ibm:security_appscanibm security appscaneq8.0.0.0
ibm:security_appscanibm security appscaneq8.0.0.1
ibm:security_appscanibm security appscaneq8.0.0.2
ibm:security_appscanibm security appscaneq8.0.1.0

CPE	Name	Operator	Version
ibm:security_appscan	ibm security appscan	le	8.7.0.0
ibm:security_appscan	ibm security appscan	eq	5.6.0.0
ibm:security_appscan	ibm security appscan	eq	6.0.0.0
ibm:security_appscan	ibm security appscan	eq	6.0.1.0
ibm:security_appscan	ibm security appscan	eq	6.0.2.0
ibm:security_appscan	ibm security appscan	eq	6.1.1.0
ibm:security_appscan	ibm security appscan	eq	8.0.0.0
ibm:security_appscan	ibm security appscan	eq	8.0.0.1
ibm:security_appscan	ibm security appscan	eq	8.0.0.2
ibm:security_appscan	ibm security appscan	eq	8.0.1.0