CVE-2013-3989

IBM Security AppScan Enterprise 8.x - Authenticated Cleartext Password Exposure

Title source: llm
STIX 2.1

Description

IBM Security AppScan Enterprise 8.x before 8.8 sends a cleartext AppScan Source database password in a response, which allows remote authenticated users to obtain sensitive information, and subsequently conduct man-in-the-middle attacks, by examining the response content.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/84975
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21653287

Scores

EPSS 0.0083
EPSS Percentile 53.8%

Details

CWE
CWE-310
Status published
Products (13)
ibm/security_appscan 8.0.0.0
ibm/security_appscan 8.0.0.1
ibm/security_appscan 8.0.0.2
ibm/security_appscan 8.0.1.0
ibm/security_appscan 8.0.1.1
ibm/security_appscan 8.0.11
ibm/security_appscan 8.5.0.0
ibm/security_appscan 8.5.0.1
ibm/security_appscan 8.6.0.0
ibm/security_appscan 8.6.0.1
... and 3 more
Published Oct 25, 2013
Tracked Since Feb 18, 2026