description: IBM AppScan Source uses a one-way hash without salt to encrypt highly sensitive information, which could allow a local attacker to decrypt information more easily.
problem types: Obtain Information
affected:
{
product: AppScan Source
vendor: IBM Corporation
versions:
status: affected, version: 7.0
status: affected, version: 8.0
status: affected, version: 8.0.0.1
status: affected, version: 8.0.0.2
status: affected, version: 8.5
status: affected, version: 8.5.0.1
status: affected, version: 8.6
status: affected, version: 8.7
status: affected, version: 8.8
status: affected, version: 9.0
status: affected, version: 9.0.1
status: affected, version: 8.6.0.2
status: affected, version: 8.6.0.1
status: affected, version: 8.7.0.1
status: affected, version: 9.0.0.1
status: affected, version: 9.0.2
status: affected, version: 9.0.3.2
status: affected, version: 9.0.3
status: affected, version: 9.0.3.1
status: affected, version: 9.0.3.3
status: affected, version: 9.0.3.4
status: affected, version: 9.0.3.5
}