Security Advisory

CVE-2014-0936

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2014-06-08 23:00:00
Last updated 2024-08-06 09:34:41
Assigner ibm
State PUBLISHED

Description

IBM Security AppScan Source 8.0 through 9.0, when the publish-assessment permission is not properly restricted for the configured database server, transmits cleartext assessment data, which allows remote attackers to obtain sensitive information by sniffing the network.