Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1, when Integrated Windows authentication is used, allows remote authenticated users to obtain administrative privileges by hijacking a session associated with the service account.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Rational AppScan Enterprise权限许可和访问控制漏洞
Vulnerability Description
IBM Rational AppScan Enterprise 5.x版本与8.5.0.1之前的8.x版本中存在漏洞。当Integrated Windows认证被启用时,远程认证用户可通过劫持服务账户相关的会话获取管理权限。
CVSS Information
N/A
Vulnerability Type
N/A