Security Advisory
CVE-2013-2997
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
IBM Security AppScan Enterprise before 8.7 does not invalidate the session context upon a logout action, which allows remote attackers to hijack sessions by leveraging an unattended workstation.