IBM Security Bulletin: Session fixation defect in IBM Security AppScan Enterprise (CVE-2016-9981)

IBM AppScan Enterprise Edition could allow an attacker to hijack a valid user’s session using social engineering.

CVE(s): CVE-2016-9981

Affected product(s) and affected version(s):

Affected AppScan Enterprise Editions	Affected Versions
IBM Security AppScan Enterprise	9.0.0 – 9.0.0.1
IBM Security AppScan Enterprise	9.0.1 – 9.0.1.1
IBM Security AppScan Enterprise	9.0.2 – 9.0.2.1
IBM Security AppScan Enterprise	9.0.3 – 9.0.3.5

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2veCdEk
X-Force Database: http://ift.tt/2uUXjVt

The post IBM Security Bulletin: Session fixation defect in IBM Security AppScan Enterprise (CVE-2016-9981) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2vezZoi