6

CVE-2012-0733

IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1, when Integrated Windows authentication is used, allows remote authenticated users to obtain administrative privileges by hijacking a session associated with the service account.

Data is provided by the National Vulnerability Database (NVD)
IbmRational Appscan Version5.2 Editionenterprise
IbmRational Appscan Version5.4 Editionenterprise
IbmRational Appscan Version5.5.0 Editionenterprise
IbmRational Appscan Version5.5.0.1 Editionenterprise
IbmRational Appscan Version5.5.0.2 Editionenterprise
IbmRational Appscan Version5.6.0 Editionenterprise
IbmRational Appscan Version5.6.0.3 Editionenterprise
IbmRational Appscan Version8.0.0 Editionenterprise
IbmRational Appscan Version8.0.0.1 Editionenterprise
IbmRational Appscan Version8.0.0.2 Editionenterprise
IbmRational Appscan Version8.0.0.3 Editionenterprise
IbmRational Appscan Version8.0.1 Editionenterprise
IbmRational Appscan Version8.0.1.1 Editionenterprise
IbmRational Appscan Version8.5.0 Editionenterprise
IbmRational Appscan Version8.5.0.0 Editionenterprise
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.41% 0.584
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6 6.8 6.4
AV:N/AC:M/Au:S/C:P/I:P/A:P