| Package | Affected versions | Patched versions |
|---|---|---|
| security appscan | = 5.6.0.0= 6.0.0.0= 6.0.1.0= 6.0.2.0= 6.1.1.0= 8.0.0.0= 8.0.0.1= 8.0.0.2= 8.0.1.0= 8.0.1.1= 8.0.11= 8.5.0.0= 8.5.0.1= 8.6.0.0= 8.6.0.1≤ 8.6.0.2 |
IBM Security AppScan Enterprise before 8.7 does not invalidate the session context upon a logout action, which allows remote attackers to hijack sessions by leveraging an unattended workstation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free