Description
The installer in IBM Security AppScan Source 8.x and 9.x through 9.0.1 has an open network port for a debug service, which allows remote attackers to obtain sensitive information by connecting to this port.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/95388
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21686844
Scores
EPSS
0.0049
EPSS Percentile
38.7%
Details
CWE
CWE-200
Status
published
Products (15)
ibm/security_appscan_source
8.0
ibm/security_appscan_source
8.0.0.1
ibm/security_appscan_source
8.0.0.2
ibm/security_appscan_source
8.5
ibm/security_appscan_source
8.5.0.1
ibm/security_appscan_source
8.6
ibm/security_appscan_source
8.6.0.1
ibm/security_appscan_source
8.6.0.2
ibm/security_appscan_source
8.7
ibm/security_appscan_source
8.7.0.0
... and 5 more
Published
Oct 26, 2014
Tracked Since
Feb 18, 2026