The installer in IBM Security AppScan Source 8.x and 9.x through 9.0.1 has an open network port for a debug service, which allows remote att

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• ibm security appscan source8.0
• ibm security appscan source8.0.0.1
• ibm security appscan source8.0.0.2
• ibm security appscan source8.5
• ibm security appscan source8.5.0.1
• ibm security appscan source8.6
• ibm security appscan source8.6.0.1
• ibm security appscan source8.6.0.2
• ibm security appscan source8.7
• ibm security appscan source8.7.0.0
• ibm security appscan source8.7.0.1
• ibm security appscan source8.8
• ibm security appscan source9.0
• ibm security appscan source9.0.0.1
• ibm security appscan source9.0.1

Other highest-scoring records for the same primary product.

• CVE-2014-3072Unspecified vulnerability in the Automation Server in IBM Security AppScan Source 8 through 8.0.0.2, 8.5 through 8.5.0.1, 8.6 through 8.6.0.
  28Monitor
• CVE-2012-2159Open redirect vulnerability in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Da
  24Monitor
• CVE-2016-3035IBM AppScan Source could reveal some sensitive information through the browsing of testlinks on the server.
  21Monitor
• CVE-2012-2173The ODBC driver in IBM Security AppScan Source 7.x and 8.x before 8.6 sends an SHA-1 hash of the connection password during connections to a
  20Monitor
• CVE-2012-2161Cross-site scripting (XSS) vulnerability in deferredView.jsp in IBM Eclipse Help System (IEHS), as used in IBM Security AppScan Source 7.x a
  18Monitor
• CVE-2016-3034IBM AppScan Source uses a one-way hash without salt to encrypt highly sensitive information, which could allow a local attacker to decrypt i
  17Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

The extension requests broader permissions than its function needs and sends the data it collects out for purposes beyond its stated function.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1{2  "permissions": ["tabs", "<all_urls>"],3  "background": { "service_worker": "analytics.js" }4}

1{2  "permissions": ["activeTab"],3  "host_permissions": ["https://yildiz.example/*"]4}

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.