IBM Security AppScan Enterprise 5.6 through 8.7.0.1 allows remote authenticated users to read arbitrary report files by leveraging knowledge of filenames that cannot be easily predicted.
References
Link | Resource |
---|---|
http://www-01.ibm.com/support/docview.wss?uid=swg21655578 | Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/88193 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2013-11-13 07:55
Updated : 2017-08-28 18:33
NVD link : CVE-2013-5453
Mitre link : CVE-2013-5453
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
ibm
- security_appscan