CVE-2013-0531

The SSL implementation in IBM Security AppScan Enterprise before 8.7.0.1 enables cipher suites with weak encryption algorithms, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg21640352	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/84707

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:security_appscan::-:enterprise:::::
	cpe:2.3:a:ibm:security_appscan:5.6.0.0:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:6.0.0.0:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:6.0.1.0:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:6.0.2.0:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:6.1.1.0:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:8.0.0.0:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:8.0.0.1:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:8.0.0.2:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:8.0.1.0:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:8.0.1.1:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:8.0.11:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:8.5.0.0:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:8.5.0.1:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:8.6.0.0:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:8.6.0.1:-:enterprise:::::*
	cpe:2.3:a:ibm:security_appscan:8.6.0.2:-:enterprise:::::*

History

No history.

Information

Published : 2013-09-08 16:55

Updated : 2024-02-28 12:00

NVD link : CVE-2013-0531

Mitre link : CVE-2013-0531

CVE.ORG link : CVE-2013-0531

JSON object : View

Products Affected

ibm

security_appscan

CWE

CWE-310

Cryptographic Issues

{"id": "CVE-2013-0531", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-09-08T16:55:06.553", "references": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21640352", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84707", "source": "psirt@us.ibm.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-310"}]}], "descriptions": [{"lang": "en", "value": "The SSL implementation in IBM Security AppScan Enterprise before 8.7.0.1 enables cipher suites with weak encryption algorithms, which makes it easier for remote attackers to obtain sensitive information by sniffing the network."}, {"lang": "es", "value": "La implementaci\u00f3n SSL en IBM Security AppScan Enterprise anteriores a 8.7.0.1 activa suites de cifrado con algorimtos de cifrado d\u00e9biles, lo cual facilita a atacantes remotos obtener informaci\u00f3n sensible mediante la captura de datos en la red."}], "lastModified": "2017-08-29T01:33:05.230", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:security_appscan:*:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E07F445-1D5A-49ED-9041-4D33E6330CBD", "versionEndIncluding": "8.7.0.0"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:5.6.0.0:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39FC4232-1329-41F1-BA0A-14132DCDB742"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:6.0.0.0:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D0878E6-3440-4964-B48C-FBBD12114E7C"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:6.0.1.0:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22B9EADC-4DEE-457C-895E-01B6AE21EFF2"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:6.0.2.0:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B5AC6947-C345-417C-BD16-69B2D676B0B1"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:6.1.1.0:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "145F339B-862C-44AC-9888-3540EE71863D"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:8.0.0.0:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1B610D1-259B-4302-B53C-122B28DC9C3E"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:8.0.0.1:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "118823C5-6169-41E3-BD9D-707A11ABF6D0"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:8.0.0.2:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FABD7F3A-218B-4C5B-9C59-B70DF12B2636"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:8.0.1.0:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46D2DFF5-9C7D-4DE6-BF50-6AF81384DF74"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:8.0.1.1:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "13510F33-FB13-48FA-9D2C-82D633A3C49E"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:8.0.11:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D5019192-0D6B-4BD3-9B51-F1B967F241DA"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:8.5.0.0:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F8F320A3-9317-4FDA-B1FB-64B70393802D"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:8.5.0.1:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "757704EA-B054-4D1C-808F-4EFF34CDB4D9"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:8.6.0.0:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4EE41CC5-24F1-44D3-A881-628B049C242C"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:8.6.0.1:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "63B20082-EA17-4BE9-AC60-1B8DA726C4A5"}, {"criteria": "cpe:2.3:a:ibm:security_appscan:8.6.0.2:-:enterprise:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "03408A0D-F784-49CC-8EDC-ACA017AA2524"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}