PT-2009-3637 · Ibm · Ibm Rational Appscan Enterprise

Published 2009-03-24 · Updated 2009-04-02 · CVE-2009-1056

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Rational AppScan Enterprise versions prior to 5.5 FP1

Description The issue allows remote attackers to read arbitrary exported reports by forcefully browsing.

Recommendations For versions prior to 5.5 FP1, update to version 5.5 FP1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2009-1056

Affected Products

Ibm Rational Appscan Enterprise

References · 7

• http://www-01.ibm.com/support/docview.wss?uid=swg1PK79991 · Vendor Advisory
• http://secunia.com/advisories/34349 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1056 · Security Note
• http://securityfocus.com/bid/34163 · Note
• http://vupen.com/english/advisories/2009/0768 · Note
• http://securitytracker.com/id?1021863 · Note
• http://osvdb.org/52764 · Note