Skip to content
OpenAdvisories
Unscored CVE-2016-3034 EUVD-2016-4107GHSA-3qpw-79h9-q4jc

IBM AppScan Source uses a one-way hash without salt to encrypt highly sensitive information, which could allow a local attacker to decrypt …

Published Feb 1, 2017 · Updated Aug 5, 2024 · Assigned by ibm

Vendor: IBM Product: AppScan Source

Description

IBM AppScan Source uses a one-way hash without salt to encrypt highly sensitive information, which could allow a local attacker to decrypt information more easily.

Affected products

VendorProductAffectedFixed
IBM AppScan Source 7.0, 8.0, 8.0.0.1, 8.0.0.2, 8.5, 8.5.0.1, 8.6, 8.7, 8.8, 9.0, 9.0.1, 8.6.0.2, 8.6.0.1, 8.7.0.1, 9.0.0.1, 9.0.2, 9.0.3.2, 9.0.3, 9.0.3.1, 9.0.3.3, 9.0.3.4, 9.0.3.5 —

References