CVE

Id
68345  
CVE No.
CVE-2014-0936  
Status
Candidate  
Description
IBM Security AppScan Source 8.0 through 9.0, when the publish-assessment permission is not properly restricted for the configured database server, transmits cleartext assessment data, which allows remote attackers to obtain sensitive information by sniffing the network.  
Phase
Assigned (20140106)  
Votes
None (candidate not yet proposed)  
Comments