IBM Security AppScan Enterprise 弱密码安全绕过漏洞(CVE-2013-0531)

BUGTRAQ ID: 62179 CVECAN ID: CVE-2013-0531 IBM Securityl AppScan Enterprise 是一个基于Web 的多用户Web 应用程序安全解决方案，提供集中的安全性扫描、数据合并和报告、补救功能、执行仪表板等功能 IBM Security AppScan Enterprise 即之前的IBM Rational AppScan Enterprise 支持使用弱加密算法的SSL套件，攻击者无需本地网络访问及身份验证，即可利用此漏洞解密客户端和服务器之间的通讯，或在客户端上执行中间人攻击，从而获取敏感信息，执行未授权操作 0 IBM...

CVE-2013-0531

The SSL implementation in IBM Security AppScan Enterprise before 8.7.0.1 enables cipher suites with weak encryption algorithms, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

CVE-2013-0531

Summary of CVE-2013-0531 : IBM Security AppScan Enterprise (formerly IBM Rational AppScan Enterprise) before 8.7.0.1 uses SSL cipher suites with weak encryption algorithms. This allows remote attackers to sniff network traffic and potentially obtain sensitive information, and can enable man-in-th...

KLA10208 OSI vulnerability in IBM Security AppScan

Weak encryption algorithms were found in IBM Security AppScan. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely at a point related to SSL. Original advisories - Related products...