Description
IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 includes a security test that sends session cookies to a specific external server, which allows man-in-the-middle attackers to hijack the test account by capturing these cookies.
Unscored
CVE-2013-0510
EUVD-2013-0521GHSA-xrqp-jfhx-4wcr
IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 includes a security test that sends session cookies to a specific external server, w…
Published Mar 29, 2013 · Updated Aug 6, 2024 · Assigned by ibm