CVE-2016-3034: IBM Security Appscan Source

Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM AppScan Source uses a one-way hash without salt to encrypt highly sensitive information, which could allow a local attacker to decrypt information more easily.

Affected products

• IBM Security Appscan Source: version 9.0.1 only; version 9.0.2 only; version 9.0.3 only

Published 2017-02-01. Last modified 2026-06-17.