cbcvebase.
CVE-2014-0936
published 2014-06-08

CVE-2014-0936: IBM Security AppScan Source 8.0 through 9.0, when the publish-assessment permission is not properly restricted for the configured database server, transmits…

PriorityP417medium4.3CVSS 2.0
AVAACHAuNCPIPAP
EPSS
0.63%
45.8th percentile
IBM Security AppScan Source 8.0 through 9.0, when the publish-assessment permission is not properly restricted for the configured database server, transmits cleartext assessment data, which allows remote attackers to obtain sensitive information by sniffing the network.

Affected

6 ranges
VendorProductVersion rangeFixed in
ibmsecurity_appscan_source——
ibmsecurity_appscan_source——
ibmsecurity_appscan_source——
ibmsecurity_appscan_source——
ibmsecurity_appscan_source——
ibmsecurity_appscan_source——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.