CVE-2014-0936

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-06-08 · updated 2026-06-17
Weakness: CWE-264

Description

IBM Security AppScan Source 8.0 through 9.0, when the publish-assessment permission is not properly restricted for the configured database server, transmits cleartext assessment data, which allows remote attackers to obtain sensitive information by sniffing the network.

Affected products

IBM Corporation AppScan Source: 8.0, 8.5, 8.6, 8.7, 8.8, 9.0

References

http://www-01.ibm.com/support/docview.wss?uid=swg21674750
https://exchange.xforce.ibmcloud.com/vulnerabilities/92317
http://www-01.ibm.com/support/docview.wss?uid=swg21674750
https://exchange.xforce.ibmcloud.com/vulnerabilities/92317

Get alerted when CVE-2014-0936 or the next vulnerability affects your stack