CVE-2013-2997

IBM Security AppScan Enterprise before 8.7 does not invalidate the session context upon a logout action, which allows remote attackers to hijack sessions by…

published September 8, 2013

CVSS
—
EPSS
0%
Percentile
38.7
In the wild
Unconfirmed
What it is

IBM Security AppScan Enterprise before 8.7 does not invalidate the session context upon a logout action, which allows remote attackers to hijack sessions by leveraging an unattended workstation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00457 · 38.7th percentile
Published
2013-09-08T16:00Z
EPSS history
Timeline
  • 08 SEP 16:00Z
    IBM Security AppScan Enterprise before 8.7 does not invalidate the session context upon a logout action, which allows remote attackers to hijack sessions by…
    cvelistv5