Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-5430

The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default username and password, which makes it easier for remote authenticated users to obtain unspecified access to this component by leveraging this credential information in an environment with applicable component installation details.

Published

2013-10-28T03:42:29.683

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.5 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

8.0

Impact Score

4.9

Weaknesses
  • Type: Primary
    CWE-255
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ibm security_appscan 8.0.0.0 Yes
Application ibm security_appscan 8.0.0.1 Yes
Application ibm security_appscan 8.0.0.2 Yes
Application ibm security_appscan 8.0.1.0 Yes
Application ibm security_appscan 8.0.1.1 Yes
Application ibm security_appscan 8.0.11 Yes
Application ibm security_appscan 8.5.0.0 Yes
Application ibm security_appscan 8.5.0.1 Yes
Application ibm security_appscan 8.6.0.0 Yes
Application ibm security_appscan 8.6.0.1 Yes
Application ibm security_appscan 8.6.0.2 Yes
Application ibm security_appscan 8.7.0.0 Yes
Application ibm security_appscan 8.7.0.1 Yes
References