IBM Security AppScan Enterprise CVE-2016-9981 Unspecified Session Fixation Vulnerability

Bugtraq ID:	100104
Class:	Design Error
CVE:	CVE-2016-9981
Remote:	Yes
Local:	No
Published:	Jul 26 2017 12:00AM
Updated:	Jul 26 2017 12:00AM
Credit:	Vaibhav Gupta
Vulnerable:	IBM Security AppScan Enterprise 9.0.3 IBM Security AppScan Enterprise 9.0.2 IBM Security AppScan Enterprise 9.0 0 IBM Security AppScan Enterprise 9.0.3.5 IBM Security AppScan Enterprise 9.0.2.1 IBM Security AppScan Enterprise 9.0.1.1 IBM Security AppScan Enterprise 9.0.1 IBM Security AppScan Enterprise 9.0.0.1
Not Vulnerable:

IBM Security AppScan Enterprise CVE-2016-9981 Unspecified Session Fixation Vulnerability

IBM Security AppScan Enterprise is prone to an unspecified session-fixation vulnerability.

An attacker can leverage this issue to gain unauthorized access to the affected application.

IBM Security AppScan Enterprise CVE-2016-9981 Unspecified Session Fixation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Security AppScan Enterprise CVE-2016-9981 Unspecified Session Fixation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Security AppScan Enterprise CVE-2016-9981 Unspecified Session Fixation Vulnerability

References:

• IBM Homepage (IBM)
  
• IBM Security AppScan Enterprise Homepage (IBM)
  
• Security Bulletin: Session fixation defect in IBM Security AppScan Enterprise (C (IBM)