IBM Rational AppScan Enterprise CVE-2013-0510 Information Disclosure Vulnerability

Bugtraq ID:	58684
Class:	Input Validation Error
CVE:	CVE-2013-0510
Remote:	Yes
Local:	No
Published:	Mar 25 2013 12:00AM
Updated:	Mar 25 2013 12:00AM
Credit:	Reported by vendor.
Vulnerable:
Not Vulnerable:

IBM Rational AppScan Enterprise CVE-2013-0510 Information Disclosure Vulnerability

IBM Rational AppScan Enterprise is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data.

An attacker can exploit this issue to obtain sensitive information. Information harvested may aid in launching further attacks.

IBM Rational AppScan Enterprise versions 8.6 through 8.6.0.2 are vulnerable.

IBM Rational AppScan Enterprise CVE-2013-0510 Information Disclosure Vulnerability

An attacker can use readily available tools to exploit the issue.

IBM Rational AppScan Enterprise CVE-2013-0510 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Rational AppScan Enterprise CVE-2013-0510 Information Disclosure Vulnerability

References:

• IBM Homepage (IBM)
  
• Rational AppScan Enterprise Homepage (IBM)
  
• Security Bulletin: Multiple vulnerabilities in IBM Security AppScan Enterprise (IBM)