CVEvulnerability
CVE-2013-0531
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-09-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
The SSL implementation in IBM Security AppScan Enterprise before 8.7.0.1 enables cipher suites with weak encryption algorithms, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.
Affected configurations
• ibm security appscan (<= 8.7.0.0)
• ibm security appscan 5.6.0.0
• ibm security appscan 6.0.0.0
• ibm security appscan 6.0.1.0
• ibm security appscan 6.0.2.0
• ibm security appscan 6.1.1.0
• ibm security appscan 8.0.0.0
• ibm security appscan 8.0.0.1
• ibm security appscan 8.0.0.2
• ibm security appscan 8.0.1.0
• ibm security appscan 8.0.1.1
• ibm security appscan 8.0.11
• ibm security appscan 8.5.0.0
• ibm security appscan 8.5.0.1
• ibm security appscan 8.6.0.0
• ibm security appscan 8.6.0.1
• ibm security appscan 8.6.0.2
Related
Weakness · not in database (1)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21640352 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84707 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21640352 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84707 exchange.xforce.ibmcloud.com