IBM Security AppScan Enterprise CVE-2013-0531 Weak Cipher Security Bypass Weakness

Bugtraq ID:	62179
Class:	Design Error
CVE:	CVE-2013-0531
Remote:	Yes
Local:	No
Published:	Sep 05 2013 12:00AM
Updated:	Sep 05 2013 12:00AM
Credit:	IBM
Vulnerable:	IBM Rational Policy Tester 8.5.0.1 IBM Rational Policy Tester 8.5 IBM Rational AppScan Enterprise 8.5.0.1 IBM Rational AppScan Enterprise 8.0.1.1 IBM Rational AppScan Enterprise 8.0.1 IBM Rational AppScan Enterprise 8.0.0.1 IBM Rational AppScan Enterprise 8.0.0
Not Vulnerable:

IBM Security AppScan Enterprise CVE-2013-0531 Weak Cipher Security Bypass Weakness

IBM Security AppScan Enterprise (formerly IBM Rational AppScan Enterprise) is prone to a security-bypass weakness.

Attackers can exploit this issue by conducting a man-in-the-middle attack.

Successfully exploiting this issue may allow attackers to obtain sensitive information and perform actions on behalf of the client.

IBM Security AppScan Enterprise CVE-2013-0531 Weak Cipher Security Bypass Weakness

An attacker can use readily available network utilities to exploit this issue.

IBM Security AppScan Enterprise CVE-2013-0531 Weak Cipher Security Bypass Weakness

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Security AppScan Enterprise CVE-2013-0531 Weak Cipher Security Bypass Weakness

References: