IBM Security AppScan Enterprise CVE-2014-6136 Information Disclosure Vulnerability

Bugtraq ID:	72861
Class:	Design Error
CVE:	CVE-2014-6136
Remote:	Yes
Local:	No
Published:	Feb 18 2015 12:00AM
Updated:	Feb 18 2015 12:00AM
Credit:	IBM
Vulnerable:	IBM Security AppScan Enterprise 9.0.1 IBM Security AppScan Enterprise 9.0 IBM Security AppScan Enterprise 8.8 IBM Security AppScan Enterprise 8.7 IBM Security AppScan Enterprise 8.6
Not Vulnerable:

IBM Security AppScan Enterprise CVE-2014-6136 Information Disclosure Vulnerability

IBM Security AppScan Enterprise is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to gain access to sensitive information. This may aid in further attacks.

IBM Security AppScan Enterprise CVE-2014-6136 Information Disclosure Vulnerability

An attacker may use readily available tools to exploit this issue.

IBM Security AppScan Enterprise CVE-2014-6136 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Security AppScan Enterprise CVE-2014-6136 Information Disclosure Vulnerability

References:

• IBM Homepage (IBM)
  
• IBM Security AppScan Source Homepage (IBM)
  
• Security Bulletin: AppScan Enterprise can be affected by multiple vulnerabilitie (IBM)