Design/Logic Flaw

IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow remote attackers to execute arbitrary commands on the installation server via unspecified vectors. IBM X-Force ID...

CVE-2014-6120: Improper Neutralization of Special Elements used in a Command

IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow remote attackers to execute arbitrary commands on the installation server via unspecified vectors. IBM X-Force ID...

PT-2018-4281

Name of the Vulnerable Software and Affected Versions IBM Rational AppScan Source versions 8.0 through 8.0.0.2 IBM Rational AppScan Source versions 8.5 through 8.5.0.1 IBM Security AppScan Source versions 8.6 through 8.6.0.2 IBM Security AppScan Source versions 8.7 through 8.7.0.1 IBM Security...

IBM Security AppScan Source Local Information Disclosure Vulnerability

IBM Security AppScan Source is a set of security testing tools for Web applications from the U.S. company IBM. A local information disclosure vulnerability exists in IBM Security AppScan Source, which can be exploited by an attacker to obtain sensitive information...

Code injection

IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow local users to obtain sensitive credential information by reading installation logs...

CVE-2014-6123

IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow local users to obtain sensitive credential information by reading installation logs...

CVE-2014-6123: Exposure of Sensitive Information to an Unauthorized Actor

IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow local users to obtain sensitive credential information by reading installation logs...

PT-2014-7055

Name of the Vulnerable Software and Affected Versions IBM Rational AppScan Source versions 8.0 through 8.0.0.2 IBM Rational AppScan Source versions 8.5 through 8.5.0.1 IBM Security AppScan Source versions 8.6 through 8.6.0.2 IBM Security AppScan Source versions 8.7 through 8.7.0.1 IBM Security...

CVE-2014-4812

The installer in IBM Security AppScan Source 8.x and 9.x through 9.0.1 has an open network port for a debug service, which allows remote attackers to obtain sensitive information by connecting to this port...

PT-2014-6132

Name of the Vulnerable Software and Affected Versions IBM Security AppScan Source versions 8.x through 9.0.1 Description The issue concerns an open network port for a debug service in the installer, which can be exploited by remote attackers to obtain sensitive information by connecting to this...

CVE-2014-4812: Exposure of Sensitive Information to an Unauthorized Actor

The installer in IBM Security AppScan Source 8.x and 9.x through 9.0.1 has an open network port for a debug service, which allows remote attackers to obtain sensitive information by connecting to this port...

CVE-2014-3072

Unspecified vulnerability in the Automation Server in IBM Security AppScan Source 8 through 8.0.0.2, 8.5 through 8.5.0.1, 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, and 9.0 through 9.0.0.1 allows local users to gain privileges by executing a crafted service...

Code injection

Unspecified vulnerability in the Automation Server in IBM Security AppScan Source 8 through 8.0.0.2, 8.5 through 8.5.0.1, 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, and 9.0 through 9.0.0.1 allows local users to gain privileges by executing a crafted service...

CVE-2014-3072

CVE-2014-3072 affects IBM Security AppScan Source Automation Server across multiple release lines (8.x up to 9.0.0.1). The vulnerability allows local users to gain privileges by executing a crafted service. The exact root cause, vulnerable component/version mapping, exploit details, and remediati...

CVE-2014-3072

Unspecified vulnerability in the Automation Server in IBM Security AppScan Source 8 through 8.0.0.2, 8.5 through 8.5.0.1, 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, and 9.0 through 9.0.0.1 allows local users to gain privileges by executing a crafted service...

PT-2014-5065

Name of the Vulnerable Software and Affected Versions IBM Security AppScan Source versions 8.0.0 through 8.0.0.2 IBM Security AppScan Source versions 8.5 through 8.5.0.1 IBM Security AppScan Source versions 8.6 through 8.6.0.2 IBM Security AppScan Source versions 8.7 through 8.7.0.1 IBM Security...

CVE-2014-3072: Undefined Security Weakness

Unspecified vulnerability in the Automation Server in IBM Security AppScan Source 8 through 8.0.0.2, 8.5 through 8.5.0.1, 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, and 9.0 through 9.0.0.1 allows local users to gain privileges by executing a crafted service...

Design/Logic Flaw

IBM Security AppScan Source 8.0 through 9.0, when the publish-assessment permission is not properly restricted for the configured database server, transmits cleartext assessment data, which allows remote attackers to obtain sensitive information by sniffing the network...

PT-2014-3957

Name of the Vulnerable Software and Affected Versions IBM Security AppScan Source versions 8.0 through 9.0 Description The issue allows remote attackers to obtain sensitive information by sniffing the network, as cleartext assessment data is transmitted when the publish-assessment permission is n...

CVE-2014-0936: Undefined Security Weakness

IBM Security AppScan Source 8.0 through 9.0, when the publish-assessment permission is not properly restricted for the configured database server, transmits cleartext assessment data, which allows remote attackers to obtain sensitive information by sniffing the network...