low1.7
CVE-2013-2997
IBM Security AppScan Enterprise before 8.7 does not invalidate the session context upon a logout action, which allows remote attackers to hijack sessions by le…
Impact
IBM Security AppScan Enterprise before 8.7 does not invalidate the session context upon a logout action, which allows remote attackers to hijack sessions by leveraging an unattended workstation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Security Appscan | through 8.6.0.2 Versions 5.6.0.0, 6.0.0.0, 6.0.1.0, 6.0.2.0, 6.1.1.0 |