Unscored CVE-2013-2997 EUVD-2013-2936GHSA-226m-h7gc-7939

IBM Security AppScan Enterprise before 8.7 does not invalidate the session context upon a logout action, which allows remote attackers to h…

Published Sep 8, 2013 · Updated Aug 6, 2024 · Assigned by ibm

Description

IBM Security AppScan Enterprise before 8.7 does not invalidate the session context upon a logout action, which allows remote attackers to hijack sessions by leveraging an unattended workstation.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21640352
appscan-cve20132997-session-impersonation(84066) vdb-entry