CVE-2014-6136

IBM Security AppScan Standard 8.x and 9.x before 9.0.1.1 FP1 supports unencrypted sessions, which allows remote attackers to obtain sensitive information by sniffing the network.

Date published : 2015-02-01

http://www-01.ibm.com/support/docview.wss?uid=swg21695170

https://exchange.xforce.ibmcloud.com/vulnerabilities/96816